April 2023
Beginner to intermediate
396 pages
8h 23m
Korean
Content preview from 자바 개발자를 위한 데브옵스 툴
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
229
7
장
바이너리 보안
CHAPTER
7
바이너리 보안
스벤 루퍼트, 스티븐 친
데이터는 정보화 시대의 공해요, 개인 정보 유출은 환경 재해다.
- 브루스 슈나이어, 『당신은 데이터의 주인이 아니다』 (반비,
2016
)
소프트웨어 보안은 종합 데브옵스 롤아웃의 핵심 과제다. 지난 몇 년간 발생한 전대미문의 침
해 사고들은 소프트웨어 보안 취약점에 대한 각계의 경각심을 다시금 불러일으키고 정부 차원
의 대응과 새로운 보안 규정
1
을 촉발했다. 개발에서 프로덕션에 이르는 소프트웨어 라이프 사
이클을 통틀어 이 규정에서 자유로운 영역은 없다. 그 결과, 데브섹옵스
DevSecOps
는 소프트웨어
개발자와 데브옵스 전문가의 이해가 함께 얽힌 뜨거운 화두로 급부상했다.
이번 장은 보안 취약점이 유발하는 리스크를 제품과 조직 관점에서 평가하는 방법을 배운다.
또한 보안성을 점검하는 정적 및 동적 테스트 기법을 설명하고 위험성을 평가하는 배점 기법도
선보일 것이다.
조직 내 역할을 불문하고 소프트웨어 전달 라이프 사이클 보호에 일조할 수 있도록 누구나 만
반의 준비를 갖춰야 한다. 구체적인 방법을 알아보기에 앞서, 보안을 등한시하고 소프트웨어
공급망 방어를 소홀히 하면 어떤 일이 발생하는지 자세히 살펴보자.
1
옮긴이_
2021
년
5
월, 미국 바이든 행정부는 사이버 보안 강화를 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.