Magnus Timner
Solidify
学习、联系、构建
准备好开始使用 AI 和最新技术了吗? Microsoft Reactor 提供活动、培训和社区资源,帮助开发人员、企业家和初创公司利用 AI 技术等。 快加入我们吧!
学习、联系、构建
准备好开始使用 AI 和最新技术了吗? Microsoft Reactor 提供活动、培训和社区资源,帮助开发人员、企业家和初创公司利用 AI 技术等。 快加入我们吧!
15 二月, 2023 | 5:00 下午 - 6:00 下午 (UTC) 协调世界时
位置: Stockholm
地址: Regeringsgatan 59 111 57 Stockholm Sweden c / o Epicenter
主题: DevOps
语言: 英语
What is this session about?
Today IT security is not something we care about after the system has been released but instead we must build security into our products and processes. We need to think about security when we write code to avoid exposing attack surfaces, we need to carefully assess the modules we base our solutions on and we need to make sure we continuously inspect the result of the security analysis.
Last time we looked at the software development lifecycle and how we can automate the process using Azure DevOps and GitHub. This time we are going to extend the process to include security practices to limit the risk of introducing vulnerabilities in the product we build and release.
If you have missed the previous session, you can view it HERE
The topics covered are:
What is DevSecOps?
Secure development practices
Static code scanning for vulnerabilities using GitHub
Dynamic security analysis using OWASP
主讲人