December 2023
Intermediate to advanced
258 pages
7h 4m
English
Overview
This book introduces you to the increasingly critical field of DevSecOps, guiding you through the principles and practices of integrating security into every phase of the software development lifecycle. By reading this book, you will gain capabilities to seamlessly incorporate secure coding and testing practices like SAST and DAST into your workflow, improving software security and quality.
What this Book will help me do
- Learn to integrate security practices seamlessly into your DevOps pipelines.
- Gain proficiency in using SAST and DAST tools for application security testing.
- Understand threat modeling and secure development lifecycle planning.
- Discover methods for automating security policy enforcement and testing.
- Master concepts like Infrastructure as Code (IaC) scanning and observability for security.
Author(s)
Vandana Verma Sehgal is an accomplished author and experienced practitioner in the field of application security and DevSecOps. She has dedicated her career to advancing secure coding practices and promoting best practices in software security. Vandana's hands-on teaching approach and expertise make her an ideal guide to bring your team's security capabilities to the next level.
Who is it for?
This book is perfect for application developers, security engineers, and DevOps professionals looking to integrate security seamlessly into their workflows. If you are beginning your journey in DevSecOps or aiming to improve your organization's security practices, this book is tailored for you. It assumes a fundamental understanding of software development processes but starts with introductory concepts before delving deeper into technical implementations.
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.