Learning DevSecOps: A Practical Guide to Processes and Tools

by Steve Suehring

How do some organizations maintain 24-7 internet-scale operations? How can organizations integrate security while continuously deploying new features? How do organizations increase security within their DevOps processes?

This practical guide helps you answer those questions and more. Author Steve Suehring provides unique content to help practitioners and leadership successfully implement DevOps and DevSecOps. Learning DevSecOps emphasizes prerequisites that lead to success through best practices and then takes you through some of the tools and software used by successful DevSecOps-enabled organizations.

You'll learn how DevOps and DevSecOps can eliminate the walls that stand between development, operations, and security so that you can tackle the needs of other teams early in the development lifecycle.

With this book, you

Learn why DevSecOps is about culture and processes, with tools to support the processesUnderstand why DevSecOps practices are key elements to deploying software in a 24-7 environmentDeploy software using a DevSecOps toolchain and create scripts to assistIntegrate processes from other teams earlier in the software development lifecycleHelp team members learn the processes important for successful software development

Genres: Computer Science, Technology, Software, Programming

192 pages, Paperback

Published June 18, 2024

Reviews

[GLOWIE · Rating 2 out of 5]

That book is really something special. The author tries to provide an overview of what DevSecOps is. He correctly states, that this term - alongside others - is kind of a not well defined buzzword.

The actual content of the book tries to walk a silver line, starting with basics of TCP/IP and various protocols, over bash scripting, over docker and kubernetes. However, everything is so vague that literally blogposts with a read time of 15 minutes include more practical and useful examples. The book is full of rants, e.g. against systemd, but the actual value of the tools described is near zero. To showcase, the book explains how to install docker, pull docker images and list running docker containers. That's it. Same level of complexity on Bash scripting or k8s.

I can really not recommend this book. As it has been part of HumbleBundle I got it, but even that price was too much, imho.

[Andrei Gavrila · Rating 2 out of 5]

I didn't like it. At all.

It's a mix of everything with too little focus on DevSecOps—especially lacking on the SEC part.
I dropped the book at 53%.

I'm sorry to be the first one to review it with such a harsh conclusion but in my opinion, this is a book to skip.

[Linus · Rating 2 out of 5]

The book was not necessarily bad, but I felt there was a lack of focus. Often it felt like there were explanations of specific tools/commands rather than focusing on how to think security-wise.

[Carlos Chacon Chavarria · Rating 2 out of 5]

I got the audiobook and 90 minutes talking about intro stuff like ping, dns, ttl :|