You're reading from Implementing DevSecOps Practices

Product type Book

Published in Dec 2023

Publisher Packt

ISBN-13 9781803231495

Pages 258 pages

Edition 1st Edition

Languages

Concepts

Cybersecurity

Author (1):

Vandana Verma Sehgal

Table of Contents (25) Chapters

Preface

1. Part 1:DevSecOps – What and How?

2. Chapter 1: Introducing DevSecOps

3. Part 2: DevSecOps Principles and Processes

4. Chapter 2: DevSecOps Principles

5. Chapter 3: Understanding the Security Posture

6. Chapter 4: Understanding Observability

7. Chapter 5: Understanding Chaos Engineering

8. Part 3:Technology

9. Chapter 6: Continuous Integration and Continuous Deployment

10. Chapter 7: Threat Modeling

11. Chapter 8: Software Composition Analysis (SCA)

12. Chapter 9: Static Application Security Testing (SAST)

13. Chapter 10: Infrastructure-as-Code (IaC) Scanning

14. Chapter 11: Dynamic Application Security Testing (DAST)

15. Part 4: Tools

16. Chapter 12: Setting Up a DevSecOps Program with Open Source Tools

17. Part 5: Governance and an Effective Security Champions Program

18. Chapter 13: License Compliance, Code Coverage, and Baseline Policies

19. Chapter 14: Setting Up a Security Champions Program

20. Part 6: Case Studies and Conclusion

21. Chapter 15: Case Studies

22. Chapter 16: Conclusion

23. Index

Why subscribe?

24. Other Books You May Enjoy

The benefits of SAST

SAST provides several benefits for organizations looking to improve the security of their software applications. Here are some of the key benefits of SAST:

Early identification of security vulnerabilities: SAST tools analyze application source code before it is compiled and deployed, allowing vulnerabilities to be identified early in the development cycle. This enables organizations to remediate vulnerabilities before they are deployed into production, reducing the risk of security incidents and minimizing the cost of remediation.
Integration into the development process: SAST tools can be integrated into the SDLC, providing feedback to developers during the coding process. This allows developers to address vulnerabilities as they are introduced, reducing the need for post-release remediation.
Comprehensive analysis: SAST tools can perform a comprehensive analysis of the application source code, identifying potential vulnerabilities that may not...