DevOps, CI, APIs, and Security Gone Agile

Explore the evolving landscape of system and application deployment in this 51-minute conference talk from AppSecEU 2014. Dive into the challenges faced by sys admins and security professionals as they adapt to agile development, continuous deployment, DevOps, and cloud technologies. Learn about Test Driven Security, a concept inspired by Test Driven Development, and discover how to architect security work to keep pace with rapid changes. Gain insights into agile methods for securing infrastructure, apps, APIs, and source code. Understand the importance of embracing change in today's fast-paced IT environment. Topics covered include Chef and Puppet for infrastructure management, vulnerability scanning, severity classification systems, and strategies for handling false positives. Benefit from real-world examples and key takeaways from the speaker's experience at Rackspace.