All Categories
Product Description SummarySecuring DevOps explores how the techniques of DevOps and security should be applied together to make cloud services safer. This introductory book reviews the latest practices used in securing web applications and their infrastructure and teaches you techniques to integrate security directly into your product. You'll also learn the core concepts of DevOps, such as continuous integration, continuous delivery, and infrastructure as a service.Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications.About the TechnologyAn application running in the cloud can benefit from incredible efficiencies, but they come with unique security threats too. A DevOps team's highest priority is understanding those risks and hardening the system against them.About the BookSecuring DevOps teaches you the essential techniques to secure your cloud services. Using compelling case studies, it shows you how to build security into automated testing, continuous delivery, and other core DevOps processes. This experience-rich book is filled with mission-critical strategies to protect web applications against attacks, deter fraud attempts, and make your services safer when operating at scale. You'll also learn to identify, assess, and secure the unique vulnerabilities posed by cloud deployments and automation tools commonly used in modern infrastructures. What's insideAn approach to continuous securityImplementing test-driven security in DevOpsSecurity techniques for cloud servicesWatching for fraud and responding to incidentsSecurity testing and risk assessmentAbout the ReaderReaders should be comfortable with Linux and standard DevOps practices like CI, CD, and unit testing.About the AuthorJulien Vehent is a security architect and DevOps advocate. He leads the Firefox Operations Security team at Mozilla, and is responsible for the security of Firefox's high-traffic cloud services and public websites.Table of ContentsSecuring DevOpsPART 1 - Case study: applying layers of security to a simple DevOps pipelineBuilding a barebones DevOps pipeline Security layer 1: protecting web applications Security layer 2: protecting cloud infrastructures Security layer 3: securing communications Security layer 4: securing the delivery pipeline PART 2 - Watching for anomalies and protecting services against attacksCollecting and storing logs Analyzing logs for fraud and attacks Detecting intrusions The Caribbean breach: a case study in incident response PART 3 - Maturing DevOps securityAssessing risks Testing security Continuous security Review "Securing DevOps: Security in the Cloud is the best book of its kind. I wasamazed by the breadth and depth of the author's knowledge. His book iswell-organized, his writing style is very clear, and he covers anastonishing amount of material."-- Richard Bejtlich"Best infosec book of the past decade."-- Scott Piper "One of the best new Devops books"-- BookAuthority"Provides both sound ideas and real-world examples. A must-read."--Adrien Saladin, PeopleDoc"Makes a complex topic completely approachable. Recommended for DevOps personnel and technology managers alike."--Adam Montville, Center for Internet Security"Practical and ready for immediate application."--Yan Guo, Eventbrite"An amazing resource for secure software development--a must in this day and age --whether or not you're in DevOps."--Andrew Bovill, Next Century About the Author Julien Vehent runs the Operations Security team of Firefox at Mozilla. He is responsible for defining, implementing and operating the security of web services that millions of Firefox users interact with daily. Julien has been focusing on developing, operating and securing Internet services for the past fifteen years, starting as a Linux sysadmin and graduating with a Master's in Information Security in 2007.