The Implementation and Practice of DevSecOps

This presentation shares an implementation model for integrating cybersecurity into DevOps, including security testing tools in CI/CD pipelines, training to help developers fix vulnerabilities, and a maturity model for assessing teams’ capabilities.

Syllabus

Introduction
What is DevSecOps
DevSecOps Current Status
Challenge
Static Application Security Testing (SAST)
Dynamic Application Security Testing (DAST)
Interactive Application Security Testing (IAST)
DevSecOps Implementation Model
DevSecOps Operating Model
Automate DevSecOps Tools into CICD Pipeline
FOSS - Sonatype Neuxs IQ Server
Cyber Security Event - Security Coding Competition