Introduction to mobile DevSecOps
Mobile DevSecOps brings together software development, security, and operations engineering disciplines to ensure mobile applications are secure, robust, and maintained.
The term DevSecOps refers to “injecting security into the mobile CI/CD pipelines at an early stage of development. Security is integrated as a shared responsibility across culture, automation, and platform design throughout the entire Mobile DevOps life cycle.”
A shift in team culture is necessary to turn security testing from being a blocker to becoming an enabler. Mobile DevSecOps combines with DevOps and is focused on continuously delivering mobile apps and security as shown in the following diagram.
Figure 8.2 – DevSecOps life cycle
Mobile DevSecOps encompasses many development activities, as shown in Figure 8.2, such as threat modeling, code scanning, vulnerability scanning, secure code review, and secure coding practices...
