0

Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Free Learning

Implementing DevSecOps Practices

You're reading from Implementing DevSecOps Practices Understand application security testing and secure coding by integrating SAST and DAST

Product type Paperback

Published in Dec 2023

Publisher Packt

ISBN-13 9781803231495

Length 258 pages

Edition 1st Edition

Tools

Chaos Engineering

Concepts

Cybersecurity

Author (1):

Vandana Verma Sehgal

View More author details

Table of Contents (25) Chapters

Preface

1. Part 1:DevSecOps – What and How?

2. Chapter 1: Introducing DevSecOps FREE CHAPTER

3. Part 2: DevSecOps Principles and Processes

4. Chapter 2: DevSecOps Principles

5. Chapter 3: Understanding the Security Posture

6. Chapter 4: Understanding Observability

7. Chapter 5: Understanding Chaos Engineering

8. Part 3:Technology

9. Chapter 6: Continuous Integration and Continuous Deployment

10. Chapter 7: Threat Modeling

11. Chapter 8: Software Composition Analysis (SCA)

12. Chapter 9: Static Application Security Testing (SAST)

13. Chapter 10: Infrastructure-as-Code (IaC) Scanning

14. Chapter 11: Dynamic Application Security Testing (DAST)

15. Part 4: Tools

16. Chapter 12: Setting Up a DevSecOps Program with Open Source Tools

17. Part 5: Governance and an Effective Security Champions Program

18. Chapter 13: License Compliance, Code Coverage, and Baseline Policies

19. Chapter 14: Setting Up a Security Champions Program

20. Part 6: Case Studies and Conclusion

21. Chapter 15: Case Studies

22. Chapter 16: Conclusion

23. Index

Why subscribe?

24. Other Books You May Enjoy

Software Composition Analysis (SCA)

Third-party dependencies are one of the biggest concerns when we deal with code. 80% to 90% of the software code contains third-party dependencies or libraries (reference: https://snyk.io/reports/open-source-security). These dependencies come with their own issues and benefits. In this chapter, software composition analysis (SCA) and its uses will be discussed. We will also cover the free and open source tools surrounding SCA. We will cover the following topics:

What is SCA?
The importance of SCA
The benefits of SCA
Detecting security flaws
Discussing past breaches
Open source SCA tools

The rest of the chapter is locked

Register for a free Packt account to unlock a world of extra content!

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at €18.99/month. Cancel anytime

Authors (1)

Vandana Verma Sehgal

Vandana Verma Sehgal

Vandana Verma Sehgal is a seasoned cybersecurity professional with over 17 years of experience. She specializes in DevSecOps and has a diverse background in vulnerability management, SOC, infrastructure, application, and cloud security. She is a speaker and trainer, having presented at events like Global OWASP AppSec, BlackHat, and Grace Hopper. Vandana actively contributes to the cybersecurity community as a member of the OWASP Global Board of Directors and Black Hat Asia Review Board and is deeply involved in diversity initiatives like InfosecGirls, WoSec, and null. She has earned numerous awards, including Cyber Security Woman of the Year 2020 and Application Security Influencer 2020 in India. Her passion for diversity and inclusion drives initiatives like InfosecGirls, WoSec, and InfosecKids, inspiring and empowering the next generation of security professionals.

See other products by Vandana Verma Sehgal

Personalised recommendations for you

Based on your interests and search pattern

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m