Identity security for software development / John Walsh, Uzi Ailon.

Format:

Book

Author/Creator:

Walsh, John, author.

Ailon, Uzi, author.

Language:

English

Subjects (All):

Computer software--Development--Security measures.

Computer software.

Computer security.

Physical Description:

1 online resource (250 pages)

Edition:

First edition.

Place of Publication:

Sebastopol, CA : O'Reilly Media, Inc., [2024]

Summary:

Maintaining secrets, credentials, and nonhuman identities in secure ways is an important, though often overlooked, aspect of secure software development. Cloud migration and digital transformation have led to an explosion of nonhuman identities--like automation scripts, cloud native apps, and DevOps tools--that need to be secured across multiple cloud and hybrid environments. DevOps security often addresses vulnerability scanning, but it neglects broader discussions like authentication, authorization, and access control, potentially leaving the door open for breaches. That's where an identity security strategy focused on secrets management can help. In this practical book, authors John Walsh and Uzi Ailon provide conceptual frameworks, technology overviews, and practical code snippets to help DevSecOps engineers, cybersecurity engineers, security managers, and software developers address use cases across CI/CD pipelines, Kubernetes and cloud native, hybrid and multicloud, automation/RPA, IOT/OT, and more. You'll learn: The fundamentals of authentication, authorization, access control, and secrets management What developers need to know about managing secrets and identity to build safer apps What nonhuman identities, secrets, and credentials are--and how to secure them How developers work with their cross-function peers to build safer apps How identity security fits into modern software development practices.

Notes:

OCLC-licensed vendor bibliographic record.

ISBN:

9781098158026

1098158024

OCLC:

1417358992