Continuous Security Monitoring on Azure
In previous chapters, we emphasized that the main objective of DevSecOps is to make security a regular part of every phase of the software development process. The outcome is that we can catch and fix most security issues before the software is deployed in production and goes live. But what about security after the software is released? A complete DevSecOps strategy should complement the security measures implemented earlier in the development process with runtime security.
In this chapter, we will cover some key aspects of implementing security in the operate and monitor phases of DevOps, including implementing runtime vulnerability management, threat detection, and threat prevention. By the end of this chapter, you will have a solid understanding of the following:
- Understanding continuous monitoring in DevOps
- Implementing runtime security gates to prevent critical risks
- Implementing continuous security monitoring for runtime...
