Identity security for software development:
Maintaining secrets, credentials, and nonhuman identities in secure ways is an important, though often overlooked, aspect of secure software development. Cloud migration and digital transformation have led to an explosion of nonhuman identities--like automation scripts, cloud native apps, and DevOps...
Gespeichert in:
| Beteiligte Personen: | , |
|---|---|
| Format: | Elektronisch E-Book |
| Sprache: | Englisch |
| Veröffentlicht: |
Sebastopol, CA
O'Reilly Media, Inc.
[2024]
|
| Ausgabe: | First edition. |
| Schlagwörter: | |
| Links: | https://learning.oreilly.com/library/view/-/9781098158026/?ar |
| Zusammenfassung: | Maintaining secrets, credentials, and nonhuman identities in secure ways is an important, though often overlooked, aspect of secure software development. Cloud migration and digital transformation have led to an explosion of nonhuman identities--like automation scripts, cloud native apps, and DevOps tools--that need to be secured across multiple cloud and hybrid environments. DevOps security often addresses vulnerability scanning, but it neglects broader discussions like authentication, authorization, and access control, potentially leaving the door open for breaches. That's where an identity security strategy focused on secrets management can help. In this practical book, authors John Walsh and Uzi Ailon provide conceptual frameworks, technology overviews, and practical code snippets to help DevSecOps engineers, cybersecurity engineers, security managers, and software developers address use cases across CI/CD pipelines, Kubernetes and cloud native, hybrid and multicloud, automation/RPA, IOT/OT, and more. You'll learn: The fundamentals of authentication, authorization, access control, and secrets management What developers need to know about managing secrets and identity to build safer apps What nonhuman identities, secrets, and credentials are--and how to secure them How developers work with their cross-function peers to build safer apps How identity security fits into modern software development practices. |
| Umfang: | 1 Online-Ressource (250 Seiten) |
Internformat
MARC
| LEADER | 00000cam a22000002 4500 | ||
|---|---|---|---|
| 001 | ZDB-30-ORH-100396577 | ||
| 003 | DE-627-1 | ||
| 005 | 20241129125348.0 | ||
| 007 | cr uuu---uuuuu | ||
| 008 | 240129s2024 xx |||||o 00| ||eng c | ||
| 035 | |a (DE-627-1)100396577 | ||
| 035 | |a (DE-599)KEP100396577 | ||
| 035 | |a (ORHE)9781098158026 | ||
| 035 | |a (DE-627-1)100396577 | ||
| 040 | |a DE-627 |b ger |c DE-627 |e rda | ||
| 041 | |a eng | ||
| 082 | 0 | |a 005.1 |2 23/eng/20240116 | |
| 100 | 1 | |a Walsh, John |e VerfasserIn |4 aut | |
| 245 | 1 | 0 | |a Identity security for software development |c John Walsh, Uzi Ailon |
| 250 | |a First edition. | ||
| 264 | 1 | |a Sebastopol, CA |b O'Reilly Media, Inc. |c [2024] | |
| 300 | |a 1 Online-Ressource (250 Seiten) | ||
| 336 | |a Text |b txt |2 rdacontent | ||
| 337 | |a Computermedien |b c |2 rdamedia | ||
| 338 | |a Online-Ressource |b cr |2 rdacarrier | ||
| 520 | |a Maintaining secrets, credentials, and nonhuman identities in secure ways is an important, though often overlooked, aspect of secure software development. Cloud migration and digital transformation have led to an explosion of nonhuman identities--like automation scripts, cloud native apps, and DevOps tools--that need to be secured across multiple cloud and hybrid environments. DevOps security often addresses vulnerability scanning, but it neglects broader discussions like authentication, authorization, and access control, potentially leaving the door open for breaches. That's where an identity security strategy focused on secrets management can help. In this practical book, authors John Walsh and Uzi Ailon provide conceptual frameworks, technology overviews, and practical code snippets to help DevSecOps engineers, cybersecurity engineers, security managers, and software developers address use cases across CI/CD pipelines, Kubernetes and cloud native, hybrid and multicloud, automation/RPA, IOT/OT, and more. You'll learn: The fundamentals of authentication, authorization, access control, and secrets management What developers need to know about managing secrets and identity to build safer apps What nonhuman identities, secrets, and credentials are--and how to secure them How developers work with their cross-function peers to build safer apps How identity security fits into modern software development practices. | ||
| 650 | 0 | |a Computer software |x Development |x Security measures | |
| 650 | 0 | |a Computer security | |
| 650 | 4 | |a Sécurité informatique | |
| 700 | 1 | |a Ailon, Uzi |e VerfasserIn |4 aut | |
| 966 | 4 | 0 | |l DE-91 |p ZDB-30-ORH |q TUM_PDA_ORH |u https://learning.oreilly.com/library/view/-/9781098158026/?ar |m X:ORHE |x Aggregator |z lizenzpflichtig |3 Volltext |
| 912 | 1 | |a ZDB-30-ORH |d 20241129 | |
| 951 | |a BO | ||
| 912 | |a ZDB-30-ORH | ||
| 049 | |a DE-91 | ||
Datensatz im Suchindex
| DE-BY-TUM_katkey | ZDB-30-ORH-100396577 |
|---|---|
| _version_ | 1821494922293805056 |
| adam_text | |
| any_adam_object | |
| author | Walsh, John Ailon, Uzi |
| author_facet | Walsh, John Ailon, Uzi |
| author_role | aut aut |
| author_sort | Walsh, John |
| author_variant | j w jw u a ua |
| building | Verbundindex |
| bvnumber | localTUM |
| collection | ZDB-30-ORH |
| ctrlnum | (DE-627-1)100396577 (DE-599)KEP100396577 (ORHE)9781098158026 |
| dewey-full | 005.1 |
| dewey-hundreds | 000 - Computer science, information, general works |
| dewey-ones | 005 - Computer programming, programs, data, security |
| dewey-raw | 005.1 |
| dewey-search | 005.1 |
| dewey-sort | 15.1 |
| dewey-tens | 000 - Computer science, information, general works |
| discipline | Informatik |
| edition | First edition. |
| format | Electronic eBook |
| fullrecord | <?xml version="1.0" encoding="UTF-8"?><collection xmlns="http://www.loc.gov/MARC21/slim"><record><leader>02628cam a22003612 4500</leader><controlfield tag="001">ZDB-30-ORH-100396577</controlfield><controlfield tag="003">DE-627-1</controlfield><controlfield tag="005">20241129125348.0</controlfield><controlfield tag="007">cr uuu---uuuuu</controlfield><controlfield tag="008">240129s2024 xx |||||o 00| ||eng c</controlfield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(DE-627-1)100396577</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(DE-599)KEP100396577</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(ORHE)9781098158026</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(DE-627-1)100396577</subfield></datafield><datafield tag="040" ind1=" " ind2=" "><subfield code="a">DE-627</subfield><subfield code="b">ger</subfield><subfield code="c">DE-627</subfield><subfield code="e">rda</subfield></datafield><datafield tag="041" ind1=" " ind2=" "><subfield code="a">eng</subfield></datafield><datafield tag="082" ind1="0" ind2=" "><subfield code="a">005.1</subfield><subfield code="2">23/eng/20240116</subfield></datafield><datafield tag="100" ind1="1" ind2=" "><subfield code="a">Walsh, John</subfield><subfield code="e">VerfasserIn</subfield><subfield code="4">aut</subfield></datafield><datafield tag="245" ind1="1" ind2="0"><subfield code="a">Identity security for software development</subfield><subfield code="c">John Walsh, Uzi Ailon</subfield></datafield><datafield tag="250" ind1=" " ind2=" "><subfield code="a">First edition.</subfield></datafield><datafield tag="264" ind1=" " ind2="1"><subfield code="a">Sebastopol, CA</subfield><subfield code="b">O'Reilly Media, Inc.</subfield><subfield code="c">[2024]</subfield></datafield><datafield tag="300" ind1=" " ind2=" "><subfield code="a">1 Online-Ressource (250 Seiten)</subfield></datafield><datafield tag="336" ind1=" " ind2=" "><subfield code="a">Text</subfield><subfield code="b">txt</subfield><subfield code="2">rdacontent</subfield></datafield><datafield tag="337" ind1=" " ind2=" "><subfield code="a">Computermedien</subfield><subfield code="b">c</subfield><subfield code="2">rdamedia</subfield></datafield><datafield tag="338" ind1=" " ind2=" "><subfield code="a">Online-Ressource</subfield><subfield code="b">cr</subfield><subfield code="2">rdacarrier</subfield></datafield><datafield tag="520" ind1=" " ind2=" "><subfield code="a">Maintaining secrets, credentials, and nonhuman identities in secure ways is an important, though often overlooked, aspect of secure software development. Cloud migration and digital transformation have led to an explosion of nonhuman identities--like automation scripts, cloud native apps, and DevOps tools--that need to be secured across multiple cloud and hybrid environments. DevOps security often addresses vulnerability scanning, but it neglects broader discussions like authentication, authorization, and access control, potentially leaving the door open for breaches. That's where an identity security strategy focused on secrets management can help. In this practical book, authors John Walsh and Uzi Ailon provide conceptual frameworks, technology overviews, and practical code snippets to help DevSecOps engineers, cybersecurity engineers, security managers, and software developers address use cases across CI/CD pipelines, Kubernetes and cloud native, hybrid and multicloud, automation/RPA, IOT/OT, and more. You'll learn: The fundamentals of authentication, authorization, access control, and secrets management What developers need to know about managing secrets and identity to build safer apps What nonhuman identities, secrets, and credentials are--and how to secure them How developers work with their cross-function peers to build safer apps How identity security fits into modern software development practices.</subfield></datafield><datafield tag="650" ind1=" " ind2="0"><subfield code="a">Computer software</subfield><subfield code="x">Development</subfield><subfield code="x">Security measures</subfield></datafield><datafield tag="650" ind1=" " ind2="0"><subfield code="a">Computer security</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Sécurité informatique</subfield></datafield><datafield tag="700" ind1="1" ind2=" "><subfield code="a">Ailon, Uzi</subfield><subfield code="e">VerfasserIn</subfield><subfield code="4">aut</subfield></datafield><datafield tag="966" ind1="4" ind2="0"><subfield code="l">DE-91</subfield><subfield code="p">ZDB-30-ORH</subfield><subfield code="q">TUM_PDA_ORH</subfield><subfield code="u">https://learning.oreilly.com/library/view/-/9781098158026/?ar</subfield><subfield code="m">X:ORHE</subfield><subfield code="x">Aggregator</subfield><subfield code="z">lizenzpflichtig</subfield><subfield code="3">Volltext</subfield></datafield><datafield tag="912" ind1="1" ind2=" "><subfield code="a">ZDB-30-ORH</subfield><subfield code="d">20241129</subfield></datafield><datafield tag="951" ind1=" " ind2=" "><subfield code="a">BO</subfield></datafield><datafield tag="912" ind1=" " ind2=" "><subfield code="a">ZDB-30-ORH</subfield></datafield><datafield tag="049" ind1=" " ind2=" "><subfield code="a">DE-91</subfield></datafield></record></collection> |
| id | ZDB-30-ORH-100396577 |
| illustrated | Not Illustrated |
| indexdate | 2025-01-17T11:22:04Z |
| institution | BVB |
| language | English |
| open_access_boolean | |
| owner | DE-91 DE-BY-TUM |
| owner_facet | DE-91 DE-BY-TUM |
| physical | 1 Online-Ressource (250 Seiten) |
| psigel | ZDB-30-ORH TUM_PDA_ORH ZDB-30-ORH |
| publishDate | 2024 |
| publishDateSearch | 2024 |
| publishDateSort | 2024 |
| publisher | O'Reilly Media, Inc. |
| record_format | marc |
| spelling | Walsh, John VerfasserIn aut Identity security for software development John Walsh, Uzi Ailon First edition. Sebastopol, CA O'Reilly Media, Inc. [2024] 1 Online-Ressource (250 Seiten) Text txt rdacontent Computermedien c rdamedia Online-Ressource cr rdacarrier Maintaining secrets, credentials, and nonhuman identities in secure ways is an important, though often overlooked, aspect of secure software development. Cloud migration and digital transformation have led to an explosion of nonhuman identities--like automation scripts, cloud native apps, and DevOps tools--that need to be secured across multiple cloud and hybrid environments. DevOps security often addresses vulnerability scanning, but it neglects broader discussions like authentication, authorization, and access control, potentially leaving the door open for breaches. That's where an identity security strategy focused on secrets management can help. In this practical book, authors John Walsh and Uzi Ailon provide conceptual frameworks, technology overviews, and practical code snippets to help DevSecOps engineers, cybersecurity engineers, security managers, and software developers address use cases across CI/CD pipelines, Kubernetes and cloud native, hybrid and multicloud, automation/RPA, IOT/OT, and more. You'll learn: The fundamentals of authentication, authorization, access control, and secrets management What developers need to know about managing secrets and identity to build safer apps What nonhuman identities, secrets, and credentials are--and how to secure them How developers work with their cross-function peers to build safer apps How identity security fits into modern software development practices. Computer software Development Security measures Computer security Sécurité informatique Ailon, Uzi VerfasserIn aut |
| spellingShingle | Walsh, John Ailon, Uzi Identity security for software development Computer software Development Security measures Computer security Sécurité informatique |
| title | Identity security for software development |
| title_auth | Identity security for software development |
| title_exact_search | Identity security for software development |
| title_full | Identity security for software development John Walsh, Uzi Ailon |
| title_fullStr | Identity security for software development John Walsh, Uzi Ailon |
| title_full_unstemmed | Identity security for software development John Walsh, Uzi Ailon |
| title_short | Identity security for software development |
| title_sort | identity security for software development |
| topic | Computer software Development Security measures Computer security Sécurité informatique |
| topic_facet | Computer software Development Security measures Computer security Sécurité informatique |
| work_keys_str_mv | AT walshjohn identitysecurityforsoftwaredevelopment AT ailonuzi identitysecurityforsoftwaredevelopment |