#167 - Security Testing as part of DevOps

FromVirtualization Security Roundtable

Start listening View podcast show

#167 - Security Testing as part of DevOps

FromVirtualization Security Roundtable

ratings:

Released:

May 27, 2016

Format:

Podcast episode

Description

Ferruh Mavituna, CEO Netsparker and Edward Haletky discuss how Security Testing fits into the Agile development lifecycle, DevOps, and Agile Cloud Development.

Released:

May 27, 2016

Format:

Podcast episode

Titles in the series (46)

The Virtualization Security Round Table Podcast provides an open forum to discuss all things related to Virtualization, Virtual Environment, and Cloud Computing Security. The podcast is hosted by Talkshoe, with the after podcast write-ups and notes are hosted on The Virtualization Practice (http://www.virtualizationpractice.com)

Skip carousel

#146 - 2015 Predictions: #146 - 2015 Predictions by Virtualization Security Roundtable
1 min listen
#147 - Virtualization Security Roundtable: #147 - Virtualization Security Roundtable by Virtualization Security Roundtable
1 min listen
#149 - Testing Security: #149 - Testing Security by Virtualization Security Roundtable
1 min listen
#159 - Virtualization Security Roundtable: #159 - Virtualization Security Roundtable by Virtualization Security Roundtable
1 min listen
#162 - Virtualization Security Roundtable: #162 - Virtualization Security Roundtable by Virtualization Security Roundtable
1 min listen
#148 - Amazon, Google, Microsoft E-Mail: #148 - Amazon, Google, Microsoft E-Mail by Virtualization Security Roundtable
1 min listen
#150 - Virtualization Security Roundtable: #150 - Virtualization Security Roundtable by Virtualization Security Roundtable
1 min listen
#156 - Scaling Up Security: #156 - Scaling Up Security by Virtualization Security Roundtable
1 min listen
#152 - IoT Security, RSA Conference, Hardening Guides: #152 - IoT Security, RSA Conference, Hardening Guides by Virtualization Security Roundtable
1 min listen
#153 - VENOM: #153 - VENOM by Virtualization Security Roundtable
1 min listen
#154 - Education: #154 - Education by Virtualization Security Roundtable
1 min listen
#151 - vSphere 6 + NSX: #151 - vSphere 6 + NSX by Virtualization Security Roundtable
1 min listen
#167 - Security Testing as part of DevOps: #167 - Security Testing as part of DevOps by Virtualization Security Roundtable
1 min listen
#160 - Virtualization Security Roundtable: #160 - Virtualization Security Roundtable by Virtualization Security Roundtable
1 min listen
#155 - Actionable Advice: #155 - Actionable Advice by Virtualization Security Roundtable
1 min listen
#177 - Privacy: #177 - Privacy by Virtualization Security Roundtable
1 min listen
#158 - Virtualization Security Roundtable: #158 - Virtualization Security Roundtable by Virtualization Security Roundtable
1 min listen
#161 - Virtualization Security Roundtable: #161 - Virtualization Security Roundtable by Virtualization Security Roundtable
1 min listen
#173 - Container Encryption: #173 - Container Encryption by Virtualization Security Roundtable
1 min listen
#164 - RSAC Innovation Sandbox Winner: #164 - RSAC Innovation Sandbox Winner by Virtualization Security Roundtable
1 min listen
#166 - RSAC Innovation Sandbox: #166 - RSAC Innovation Sandbox by Virtualization Security Roundtable
1 min listen
#157 - Virtualization Security Roundtable: #157 - Virtualization Security Roundtable by Virtualization Security Roundtable
1 min listen
#163 - Virtualization Security Roundtable: #163 - Virtualization Security Roundtable by Virtualization Security Roundtable
1 min listen
#171 - Security in the Hybrid Cloud: #171 - Security in the Hybrid Cloud by Virtualization Security Roundtable
1 min listen
#168 - Encryption Up and Down the Stack: #168 - Encryption Up and Down the Stack by Virtualization Security Roundtable
1 min listen
#175 - SOCaaS: #175 - SOCaaS by Virtualization Security Roundtable
1 min listen
#165 - Behavioral Analysis: #165 - Behavioral Analysis by Virtualization Security Roundtable
1 min listen
#172 - Patching and more Patching!: #172 - Patching and more Patching! by Virtualization Security Roundtable
1 min listen
#170 - IT Prep for Holidays: #170 - IT Prep for Holidays by Virtualization Security Roundtable
1 min listen
#174 - Security DR Planning: #174 - Security DR Planning by Virtualization Security Roundtable
1 min listen

More Episodes from Virtualization Security Roundtable

Skip carousel

#191 - Grey Market: #191 - Grey Market by Virtualization Security Roundtable
1 min listen
#190 - Treasure Troves: #190 - Treasure Troves by Virtualization Security Roundtable
1 min listen
#189 - Threat Modeling: #189 - Threat Modeling by Virtualization Security Roundtable
1 min listen
#188 - Virtualization Security Roundtable: #188 - Virtualization Security Roundtable by Virtualization Security Roundtable
1 min listen
#187 - Virtualization Security Roundtable: #187 - Virtualization Security Roundtable by Virtualization Security Roundtable
1 min listen
#186 - Back to Basics: #186 - Back to Basics by Virtualization Security Roundtable
1 min listen
#185 - Virtual Deisgn Master Security Challenges: #185 - Virtual Deisgn Master Security Challenges by Virtualization Security Roundtable
1 min listen
#184 - Virtualization Security Roundtable: #184 - Virtualization Security Roundtable by Virtualization Security Roundtable
1 min listen
#183 - Peyta, Discussion on Risk: #183 - Peyta, Discussion on Risk by Virtualization Security Roundtable
1 min listen
#182 - Multi-Cloud: #182 - Multi-Cloud by Virtualization Security Roundtable
1 min listen
#181 - WannaCry, SambaCry, etc.: #181 - WannaCry, SambaCry, etc. by Virtualization Security Roundtable
1 min listen
#180 - VDM Why? What? Part 1: #180 - VDM Why? What? Part 1 by Virtualization Security Roundtable
1 min listen
#179 - Data Protection: #179 - Data Protection by Virtualization Security Roundtable
1 min listen
#178 - Lowest Hanging Fruit: #178 - Lowest Hanging Fruit by Virtualization Security Roundtable
1 min listen
#177 - Privacy: #177 - Privacy by Virtualization Security Roundtable
1 min listen
#176 - FInding the Bits: #176 - FInding the Bits by Virtualization Security Roundtable
1 min listen
#175 - SOCaaS: #175 - SOCaaS by Virtualization Security Roundtable
1 min listen
#174 - Security DR Planning: #174 - Security DR Planning by Virtualization Security Roundtable
1 min listen
#173 - Container Encryption: #173 - Container Encryption by Virtualization Security Roundtable
1 min listen
#172 - Patching and more Patching!: #172 - Patching and more Patching! by Virtualization Security Roundtable
1 min listen
#171 - Security in the Hybrid Cloud: #171 - Security in the Hybrid Cloud by Virtualization Security Roundtable
1 min listen
#170 - IT Prep for Holidays: #170 - IT Prep for Holidays by Virtualization Security Roundtable
1 min listen
#169 - The Day After: #169 - The Day After by Virtualization Security Roundtable
1 min listen
#168 - Encryption Up and Down the Stack: #168 - Encryption Up and Down the Stack by Virtualization Security Roundtable
1 min listen
#165 - Behavioral Analysis: #165 - Behavioral Analysis by Virtualization Security Roundtable
1 min listen
#166 - RSAC Innovation Sandbox: #166 - RSAC Innovation Sandbox by Virtualization Security Roundtable
1 min listen
#164 - RSAC Innovation Sandbox Winner: #164 - RSAC Innovation Sandbox Winner by Virtualization Security Roundtable
1 min listen
#163 - Virtualization Security Roundtable: #163 - Virtualization Security Roundtable by Virtualization Security Roundtable
1 min listen
#162 - Virtualization Security Roundtable: #162 - Virtualization Security Roundtable by Virtualization Security Roundtable
1 min listen
#161 - Virtualization Security Roundtable: #161 - Virtualization Security Roundtable by Virtualization Security Roundtable
1 min listen

Related podcast episodes

Skip carousel

Security and Compliance with Wendy Knox Everette: Security and compliance are two fundamental components of software. Wendy Knox Everette, Senior Security Advisor at Leviathan Security explained what security and compliance are. We talked about the software development cycle and how security can be involved throughout the cycle. Wendy also explained what compliant software means and the process of making software compliant. by The Women in Tech Show: A Technical Podcast
20 min listen
Evolution of AI & Machine Learning on Emerging Tech Horizons: On this week’s episode, Dr. Mark Lewis is joined by Dr. Ravi Ravichandran, Vice President and Chief Technology Officer of the Intelligence and Security Sector at BAE Systems. Join Dr. Ravichandran and Dr. Lewis as they explore the evolution of AI... by Emerging Tech Horizons
31 min listen
The Testing Show: Shifting Security Left with Jeffrey Wheat: Software Testing experts discussing trends and directions in the QA industry by The Testing Show
32 min listen
Elizabeth Lawler, CyberArk - Startup Security Weekly #58: Elizabeth Lawler is the Vice President of DevOps Security at CyberArk. She co-founded Conjur, a devops security company, in 2011; it was acquired by CyberArk in May 2017. Elizabeth joins us for an awesome devops-charged interview! Full Show Notes:... by Security Weekly Podcast Network (Video)
44 min listen
Minerva Labs, CrowdStrike, & VMware - Enterprise Security Weekly #104: In the Enterprise News this week, VMWare launches Blockchain project, lacework raises new funds to extend Cloud Security capabilites, Minerva Labs achieves certified integration with McAfee ePO, CrowdStrike helps advance malware searches on hybrid... by Enterprise Security Weekly (Video)
27 min listen
Minerva Labs, CrowdStrike, & VMware - Enterprise Security Weekly #104: In the Enterprise News this week, VMWare launches Blockchain project, lacework raises new funds to extend Cloud Security capabilites, Minerva Labs achieves certified integration with McAfee ePO, CrowdStrike helps advance malware searches on hybrid... by Security Weekly Podcast Network (Video)
27 min listen
EP160 Don't Cloud Your Judgement: Security and Cloud Migration, Again!: Guest: , Field CTO, Lacework, ex-AWS, ex-USG Topics: How can organizations ensure that their security posture is maintained or improved during a cloud migration? Is cloud migration a risk reduction move? What are some of the common... by Cloud Security Podcast by Google
28 min listen
An MRI for the Cloud: Network Data for Cloud Visibility, Detection & IR - Edward Wu - ESW #293: Cloud computing’s velocity and dynamism make it hard for security teams to monitor and protect workloads in the cloud without impeding the agility of dev teams. ExtraHop Senior Principal Data Scientist Edward Wu joins ESW to discuss practical... by Enterprise Security Weekly (Video)
37 min listen
An MRI for the Cloud: Network Data for Cloud Visibility, Detection & IR - Edward Wu - ESW #293: Cloud computing’s velocity and dynamism make it hard for security teams to monitor and protect workloads in the cloud without impeding the agility of dev teams. ExtraHop Senior Principal Data Scientist Edward Wu joins ESW to discuss practical... by Security Weekly Podcast Network (Video)
37 min listen
Moving Faster - Securely. Why Your Org Should Add Security to your DevOps Program [Security Sandbox]: Why You Should Add Security to your DevOps Program by CyberWire Daily
33 min listen
Securing DevOps: Security in the Cloud with Julien Vehent: Are you looking for an approach to continuous security? In this episode, we’ll talk with Julien Vehent about his book Securing DevOps: Security in the cloud. Discover why security is an integral component of your product development efforts, and how... by TestGuild Security Testing Podcast
30 min listen
Building Security Into the DevOps Lifecycle - Sumedh Thakar - PSW #666: DevOps has gained momentum over the years as its methods have been used by teams worldwide to accelerate application delivery. But where we continue to struggle is in integrating security into this workflow. In this discussion, Sumedh Thakar,... by Security Weekly Podcast Network (Video)
59 min listen
Integrating Security in DevOps: In this podcast, Hasan Yasar discusses how Secure DevOps attempts to shift the paradigm for tough security problems from following rules to creatively determining solutions. by Software Engineering Institute (SEI) Podcast Series
29 min listen
Acquisition-Mania, SaltStack Breaches, & RSAC 2021 - ESW #184: RSA Conference 2021 Changes Date from February to May 2021, Docker partners with Snyk on container image vulnerability scanning, Venafi acquires Jetstack to bring together developer speed and enterprise security, Onapsis expands assessments for its... by Security Weekly Podcast Network (Video)
36 min listen
Acquisition-Mania, SaltStack Breaches, & RSAC 2021 - ESW #184: RSA Conference 2021 Changes Date from February to May 2021, Docker partners with Snyk on container image vulnerability scanning, Venafi acquires Jetstack to bring together developer speed and enterprise security, Onapsis expands assessments for its... by Enterprise Security Weekly (Video)
36 min listen
ADHD as a Superpower with Jess Schalz: Jessica Schalz is a workflow engineer at Transposit, a company that build interactive runbooks for DevOps and SREs to turn alerts into action. Prior to this position, Jessica worked as a security engineer at Remitly, a product security engineer at Target, by Screaming in the Cloud
30 min listen
DevSecOps: All links and images for this episode can be found on CISO Series () We know that security plays a role in DevOps, but we've been having a hard time inserting ourselves in the conversation and in the process. How can we get the two sides of developers... by Defense in Depth
27 min listen
EP132 Chaos Engineering for Security: How to Improve Software Resilience with Kelly Shortridge: Guest: , Senior Principal Engineer in the Office of the CTO at Fastly Topics: So what is Security Chaos Engineering? is Anton’s favorite. One thing that mystifies me, however, is that you outline how to fail with alerts (send too... by Cloud Security Podcast by Google
36 min listen
The State of Data Security - Chris Brown - ESW #212: A casual and candid conversation on database security. Talking through the current data trends including the transition to the cloud and what this means for the database security practitioner. What pitfalls and tools can be used to help simplify and... by Enterprise Security Weekly (Video)
24 min listen
The State of Data Security - Chris Brown - ESW #212: A casual and candid conversation on database security. Talking through the current data trends including the transition to the cloud and what this means for the database security practitioner. What pitfalls and tools can be used to help simplify and... by Security Weekly Podcast Network (Video)
24 min listen
The CERT Guide to Coordinated Vulnerability Disclosure: In this podcast, Allen Householder and David Warren discuss the CERT Guide to Coordinated Vulnerability Disclosure, which is intended for use by security researchers, software vendors, and other stakeholders in navigating the complexities of informing... by Software Engineering Institute (SEI) Podcast Series
35 min listen
SWVHSC: Micro-Interview - ReversingLabs & Veracode - Chris Wysopal, Mario Vuksan - ESW #194: Mario Vuksan, CEO and Co-Founder of ReversingLabs discusses modern digital objects, made up of layers of structured code and data, are central to the exchange or storage of information and are becoming increasingly complex. This interview is sponsored... by Enterprise Security Weekly (Video)
33 min listen
SWVHSC: Micro-Interview - ReversingLabs & Veracode - Chris Wysopal, Mario Vuksan - ESW #194: Mario Vuksan, CEO and Co-Founder of ReversingLabs discusses modern digital objects, made up of layers of structured code and data, are central to the exchange or storage of information and are becoming increasingly complex. This interview is sponsored... by Security Weekly Podcast Network (Video)
33 min listen
Enhancing Software Security with DevSecOps by Continuous improvement
8 min listen
Moving from DevOps to DevSecOps: DevSecOps is a set of principles and practices that provide faster delivery of secure software capabilities by improving the collaboration and communication between software development teams, IT operations, and security staff within an organization,... by Software Engineering Institute (SEI) Podcast Series
41 min listen
Building your security team & tool stack w/ Laura Bell Main #146: This episode features all things security with our guest, Laura Bell Main, CEO & Founder @ SafeStack. She shares valuable strategies for building your security team & tool stack. We cover why security is a human problem based on human motivations, prioritization conversations for assessing risks, considerations for early-stage security teams, how behavior change & decision making impact security, and considerations for companies in the “messy middle” phase. Laura also addresses communicating about security in terms of tech debt, recommendations for incorporating security monitoring tools, how to measure those tools’ ROI, and more. by The Engineering Leadership Podcast
48 min listen
Managing Secrets Using Vault: with Seth Vargo by The Changelog: Software Development, Open Source
74 min listen
Episode 82: Organization of Large Code Bases with Juergen Hoeller: In this episode Eberhard Wolff speaks with Jürgen Höller, the co-found of the Spring framework. Spring is a tremendously successful Java framework so they discuss the design of large frameworks and the issues that arise in the evolution. by Software Engineering Radio - the podcast for professional software developers
51 min listen
How Can Security Work TOGETHER, Not Against, Developers - Joe Garcia - ASW #107 by Application Security Weekly (Video)
37 min listen
How Can Security Work TOGETHER, Not Against, Developers - Joe Garcia - ASW #107: DevOps and Agile IT practices have been around for a while. However, security teams are just now catching up. We will discuss how security teams can stop being “showstoppers” for the developers and actually work with them, not against them. Focus... by Security Weekly Podcast Network (Video)
37 min listen

Discover this podcast and so much more

#167 - Security Testing as part of DevOps

#167 - Security Testing as part of DevOps

Description

Titles in the series (46)

More Episodes from Virtualization Security Roundtable

Related podcast episodes