Security in the Delivery Pipeline
Explore security integration in the software delivery pipeline through this GOTO Amsterdam 2017 conference talk. Discover modern approaches to security testing that challenge the status quo of relegating security to the end of the development process. Learn about continuous delivery, rugged software, and the concept of "push to time." Examine the challenges of security versus compliance and DevOps, and understand why traditional security measures can be ineffective and expensive. Dive into the SEI CD Pipeline and various security tools like RetireJS, Zette attack proxy, and Breakman. Investigate the importance of runtime security, attack detection, and bug bounties. Gain insights on separating duties and implementing attack-driven defense strategies. Walk away with three key lessons to improve your approach to security in software delivery.