AppSec Decoded: Building security into DevSecOps
Our experts discuss the changes organizations are making to their processes and AST tool management to achieve more effective DevSecOps.
Application security testing is evolving to meet the speed at which DevOps teams operate. Processes and tools are more fast-paced and rely on integration and automation to maintain efficiency throughout the software development life cycle (SDLC).
But simply automating and integrating your security tools and processes won’t magically turn your CI/CD pipelines into a well-oiled machine. Many organizations struggle with how and where to introduce automation and integrations efficiently. Additionally, DevSecOps teams are challenged with how to make sense of the noise their AppSec tools generate once they’ve been automated into DevOps pipelines.
A new approach to DevSecOps is required
In this episode of AppSec Decoded featuring Sammy Migues, principal scientist at Synopsys and coauthor of the BSIMM report, and Tim Mackey, principal security strategist at Synopsys Cybersecurity Research Center (CyRC), we explore the shifts in processes and effective management of AppSec tools in CI/CD pipelines. Our experts also discuss how DevSecOps teams can make sense of their data to effectively manage their business risk.
Stay on top of the latest application security news
*** This is a Security Bloggers Network syndicated blog from Software Integrity Blog authored by Synopsys Editorial Team. Read the original post at: https://www.synopsys.com/blogs/software-security/appsec-decoded-building-security-into-devsecops/
