DevOps is an opportunity to make security an integral part of application development.

1. DevOps and Application Security
Shahee Mirza
Co-Founder : BEETLES
Twitter: @shaheemirza

2. DevOps?

3. But Where is the Security?

4. TRADITIONAL

5. QA and OPS: Devs:

6. Security is last task?
• Security Testing
• Firewall Configuration
• Source Code Analysis

7. Security Testing, Firewall configuration and
Code analysis – Takes time

8. But, the investor has no time

9. So, What have we got:

10. But, What we planned :

11. … is that end of everything?

12. Required: Security in DevOps

13. Welcome to DevOpsSec !!

14. But, How will I introduce DevOpsSec to my team?

15. Module 1: Make a plan for Security

16. Module 2: Connect entire Team

17. Module 3: Make a culture of Self-
Learning about Security for Devs + QA.

18. Module 4: Automate everything.

19. Develop
Code
Commit
Source
Control
Build
Trigger
Tests
Deploy
to
ProductionDeploy
to Test
Env
Report
&
Notify
Publish to
release
repository
Automatic
security
test
SCA
Test
Security within Continuous Deployment

20. Module 5: Build a Security Team

21. Now, you have…

22. Summary

23. 1. Make a plan for security
2. Educate your team
3. Integrate security into automatic build
process.

24. Thank you