Episode 24: Putting The Sec Into DevOps

Episode 24 • August 19, 2020 • 00:37:14
Episode 24: Putting The Sec Into DevOps
SilverLining IL
Episode 24: Putting The Sec Into DevOps

Aug 19 2020 | 00:37:14

/

Hosted By

Moshe Ferber Ariel Munafo

Show Notes

Attendees

Guest: Dima Revelis

Guest title: Senior Devops engineer

Company: MoonActive

Abstract

DevsecOps is accelerating fast as the new buzzword for modern information security practices. In this episode we use the expertise of Dima Revelis in order to dive deep into understanding DevOps practices, what is CI/ CD pipeline and which security tools are relevant for all of those new practices.

Timing:

0:00 - Introducing our guest

2:50 - What is devops

7:50 - What is deployment pipeline

14:20 - What is CI and which security testing can be implemented

17:20 - What is CD and which security consideration 

18:40 - Dive deeper into security testing - QA, code review, static & dynamic   analysis

20:45 - So much automation, do we still need manual testing? 

22:30 - Additional security aspects: using Jenkins, authentication and authorization, secret management

26:40 - Availability considerations and disaster recovery

33:30 - Summary and final words

Other Episodes

Episode 48

March 16, 2022 • 00:37:12
Episode Cover

SilverLining Episode 48: Deep dive into Confidential computing

Guest: Yan Michalevsky Guest title:  Co-Founder and CTO at Anjuna Language: English   Abstract Confidential computing is one of the more interesting technologies that is...

Listen

Episode 49

April 06, 2022 • 00:37:28
Episode Cover

SilverLining Episode 49: Security for Fintech Companies

Guest: Alex Gestin Guest title:  CISO, Riseup Language: English   Abstract The growing number of fintech companies represent a shift in the market from traditional...

Listen

Episode 38

May 12, 2021 • 00:32:43
Episode Cover

SilverLining Episode 38: Cloud Native Security Foundations

Attendees Guest: Gadi Naor  Guest Title: VP Software Engineering, Cloud Security @ Rapid7 Topic: Cloud Native Security Foundations Abstract Lately, The CNCF (Cloud Native...

Listen