Note publique d'information : Gain a solid understanding of the threat landscape and discover best practices to
protect your software factory throughout the SDLC, with valuable insights from security
experts at GitGuardian. Key Features: Develop a strong security posture by grasping
key attack vectors in the SDLC. Implement industry-leading best practices to protect
software from evolving threats. Utilize legislative and regulatory landscapes to mitigate
compliance-related costs. Book Description: Drawing from GitGuardian's extensive experience
in securing millions of lines of code for organizations worldwide, Crafting Secure
Software takes you on an exhaustive journey through the complex world of software
security and prepares you to face current and emerging security challenges confidently.
Authored by security experts, this book provides unique insights into the software
development lifecycle (SDLC) and delivers actionable advice to help you mitigate and
prevent risks. From securing code-writing tools and secrets to ensuring the integrity
of the source code and delivery pipelines, you'll get a good grasp on the threat landscape,
uncover best practices for protecting your software, and craft recommendations for
future-proofing against upcoming security regulations and legislation. By the end
of this book, you'll have gained a clear vision of the improvements needed in your
security posture, along with concrete steps to implement them, empowering you to make
informed decisions and take decisive action in safeguarding your software assets.
What you will learn: Get to grips with security trends and GitGuardian's role in modern
software. Analyze major security breaches and their impact on the industry. Develop
a threat model tailored to your business and risk appetite. Implement security measures
across your entire SDLCSecure secrets within codebases, configurations, and artifacts.
Design and maintain secure build pipelines and deployment setups. Navigate security
compliance, including current and future laws. Prepare for future security with AI-generated
code integration. Who this book is for: This book is an essential read for security
and IT leaders navigating the complexities of modern software development. The book
is also useful for chief security officers (CSOs), chief information security officers
(CISOs), security architects, DevOps professionals, and IT decision makers. A basic
understanding of software engineering, version control, and build and delivery mechanisms
is needed. This guide will empower you to comprehend and mitigate threats in today's
dynamic software factories, regardless of your technical depth
paprika.idref.fr
data.idref.fr
Documentation
