Magnus Timner
Solidify
學習、聯繫、建置
準備好開始使用 AI 和最新技術嗎? Microsoft Reactor 提供活動、訓練和社群資源,協助開發人員、企業家和初創公司建置 AI 技術等等。 加入我們!
學習、聯繫、建置
準備好開始使用 AI 和最新技術嗎? Microsoft Reactor 提供活動、訓練和社群資源,協助開發人員、企業家和初創公司建置 AI 技術等等。 加入我們!
15 2月, 2023 | 5:00 下午 - 6:00 下午 (UTC) 國際標準時間
Location: Stockholm
位址: Regeringsgatan 59 111 57 Stockholm Sweden c / o Epicenter
主題: DevOps
語言: 英文
What is this session about?
Today IT security is not something we care about after the system has been released but instead we must build security into our products and processes. We need to think about security when we write code to avoid exposing attack surfaces, we need to carefully assess the modules we base our solutions on and we need to make sure we continuously inspect the result of the security analysis.
Last time we looked at the software development lifecycle and how we can automate the process using Azure DevOps and GitHub. This time we are going to extend the process to include security practices to limit the risk of introducing vulnerabilities in the product we build and release.
If you have missed the previous session, you can view it HERE
The topics covered are:
What is DevSecOps?
Secure development practices
Static code scanning for vulnerabilities using GitHub
Dynamic security analysis using OWASP
演講者