Subscription

Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Learning Hub

Conferences

Free Learning

You're reading from Practical Security Automation and Testing Tools and techniques for automated security scanning and testing in DevSecOps

Product type Paperback

Published in Feb 2019

Publisher Packt

ISBN-13 9781789802023

Length 256 pages

Edition 1st Edition

Languages

C++

Tools

JMeter

Concepts

Application Security

Author (1):

Tony Hsiang-Chih Hsu

View More author details

Table of Contents (19) Chapters

Preface

1. The Scope and Challenges of Security Automation FREE CHAPTER

2. Integrating Security and Automation

3. Secure Code Inspection

4. Sensitive Information and Privacy Testing

5. Security API and Fuzz Testing

6. Web Application Security Testing

7. Android Security Testing

8. Infrastructure Security

9. BDD Acceptance Security Testing

10. Project Background and Automation Approach

11. Automated Testing for Web Applications

12. Automated Fuzz API Security Testing

13. Automated Infrastructure Security

14. Managing and Presenting Test Results

15. Summary of Automation Security Testing Tips

16. List of Scripts and Tools

17. Solutions

18. Other Books You May Enjoy

Leave a review - let other readers know what you think

Case study – automating a secure code review

Software Company-X releases cloud services. The Android development team in company-X is using IDE developer tools to do secure code review for released Android applications. However, the uses of the IDE developer tools may have less visibility of the whole project security status. The development manager is also looking for a secure coding inspection service that can establish consistent secure coding quality across projects. Therefore, a secure coding scanning service will be in a need.

Secure coding scanning service – SWAMP

The following diagram shows an ideal secure coding inspection service. It provides users or developers with interfaces to submit the source...

The rest of the chapter is locked

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at €18.99/month. Cancel anytime

Authors (1)

Hsu

Tony Hsiang-Chih Hsu is a senior security architect, software development manager, and project manager with more than 20 years' experience in security services technology. He has extensive experience of the Secure Software Development Lifecycle (SSDLC) in relation to activities including secure architecture/design review, secure code review, threat modeling, automated security testing, and cloud service inspection. He is also an in-house SDL trainer, having offered hands-on courses totaling in more than 300 hours. He is also the author of Hands-on Security in DevOps, and a co-author of several Open Web Application Security Project (OWASP) projects, including the OWASP testing guide, a proactive control guide, deserialization, cryptographic, and the XXE prevention cheatsheet.

See other products by Hsu