Packt+ | Advance your knowledge in tech

You're reading from Hands-On Security in DevOps Ensure continuous security, deployment, and delivery with DevSecOps

Product type Paperback

Published in Jul 2018

Publisher

ISBN-13 9781788995504

Length 356 pages

Edition 1st Edition

Concepts

DevOps

Author (1):

Hsu

View More author details

Table of Contents (28) Chapters

Title Page

Packt Upsell

Contributors

Preface

1. DevSecOps Drivers and Challenges FREE CHAPTER

2. Security Goals and Metrics

3. Security Assurance Program and Organization

4. Security Requirements and Compliance

5. Case Study - Security Assurance Program

6. Security Architecture and Design Principles

7. Threat Modeling Practices and Secure Design

8. Secure Coding Best Practices

9. Case Study - Security and Privacy by Design

10. Security-Testing Plan and Practices

11. Whitebox Testing Tips

12. Security Testing Toolkits

13. Security Automation with the CI Pipeline

14. Incident Response

15. Security Monitoring

16. Security Assessment for New Releases

17. Threat Inspection and Intelligence

18. Business Fraud and Service Abuses

19. GDPR Compliance Case Study

20. DevSecOps - Challenges, Tips, and FAQs

1. Assessments

2. Other Books You May Enjoy

Leave a review - let other readers know what you think

Index

Case studies

In this section, we will discuss the practical GDPR cases for the GDPR implementation issue, with suggested approaches or open source tools. The cases will cover data discovery, database anonymization, cookie consent, data masking, and website privacy. These are typical practical scenarios that directly relate to GDPR compliance.

Case 1 – personal data discovery

Company A has been running several services and databases with lots of legacy-running applications for several years. The database and IT administrators would like to do personally identifiable information (PII) scanning to gain an overview of all the personal data distribution status. In this case, company A would need a PII discovery tool, which can define the PII data type, and be able to search for various kinds of files and databases. Take a look at this diagram:

For an open source tool, the RedataSense data discovery tool is recommended, since it supports multiple databases and can identify personal data by a dictionary...