Mastering Devsecops: Secure Software Delivery from Code to Cloud
暫譯: 精通 DevSecOps：從程式碼到雲端的安全軟體交付

Bhardwaj, Avdhesh

Mastering Devsecops: Secure Software Delivery from Code to Cloud
  • 出版商: Apress
  • 出版日期: 2026-10-14
  • 售價: $2,170
  • 貴賓價: 9.5 折 $2,061
  • 語言: 英文
  • 頁數: 380
  • 裝訂: Quality Paper - also called trade paper
  • ISBN: 9798868832277
  • ISBN-13: 9798868832277
  • 相關分類: DevOps、CI/CD、Kubernetes

    • 海外代購書籍(需單獨結帳)

相關主題

商品描述

Modern software delivery demands more than speed. It requires security to be built into every stage of the development lifecycle. As organizations embrace cloud-native architectures, Kubernetes, Infrastructure as Code, and AI-powered development, protecting the software supply chain has become one of the most critical challenges facing engineering teams.
This book provides a practical, enterprise-focused guide to designing, implementing, and operating secure software delivery pipelines from code to cloud. Rather than treating security as a final checkpoint, this book demonstrates how security can be integrated throughout the CI/CD lifecycle using Zero-Trust principles, policy-as-code, automated security testing, software supply chain protection, and continuous compliance.
You will learn how to secure source code repositories, manage secrets, protect build pipelines, validate software artifacts, generate and verify SBOMs, harden Kubernetes workloads, and secure cloud-native deployments. The book also explores AI-driven security automation, runtime threat detection, behavioral analytics, and self-healing pipelines capable of automatically detecting, containing, and recovering from security incidents.
Drawing from real enterprise experience, practical architectures, and current industry best practices, this book equips DevOps engineers, security professionals, cloud architects, and technology leaders with the knowledge needed to build secure, scalable, and resilient software delivery platforms for modern organizations.
Whether you are beginning your DevSecOps journey or leading enterprise transformation initiatives, this book provides the architectural guidance and practical techniques needed to secure software delivery at production scale.

What You Will Learn

  • Design and build CI/CD pipelines that follow Zero-Trust principles
  • Secure source code repositories, secrets, identities, and development workflows
  • Implement SAST, DAST, SCA, SBOM generation, and artifact signing within CI/CD pipelines
  • Protect software supply chains using cryptographic verification and policy enforcement
  • Design enterprise-grade DevSecOps architectures for regulated environments.
  • Implement governance, compliance, and continuous security validation at scale

Who This Book is For

Sr. DevOps Engineers, Cloud & Platform Engineers, Security Engineers, DevSecOps Architects, Security Architects, CISOs & Security Managers, Compliance & Governance Architects

商品描述(中文翻譯)

現代化軟體交付所要求的不只是速度，更需要將安全性融入開發生命週期的每個階段。隨著組織採用 cloud-native 架構、Kubernetes、Infrastructure as Code，以及 AI 驅動的開發方式，保護軟體供應鏈已成為工程團隊面臨的最關鍵挑戰之一。

本書提供一套以企業為導向的實務指南，說明如何從程式碼到雲端，設計、實作與運作安全的軟體交付管線。本書不將安全性視為最後一道檢查關卡，而是示範如何運用 Zero-Trust 原則、policy-as-code、自動化安全測試、軟體供應鏈防護與持續合規，將安全性整合至整個 CI/CD 生命週期。

您將學習如何保護原始碼儲存庫、管理 secrets、保護建置管線、驗證軟體 artifacts、產生與驗證 SBOM、強化 Kubernetes 工作負載，以及保護 cloud-native 部署。本書也將探討 AI 驅動的安全自動化、執行階段威脅偵測、行為分析，以及能夠自動偵測、遏制並從安全事件中復原的自我修復管線。

本書汲取真實企業經驗、實務架構與最新業界最佳實務，協助 DevOps 工程師、安全性專業人員、雲端架構師與技術領導者，掌握為現代組織打造安全、可擴充且具韌性的軟體交付平台所需的知識。

無論您是剛開始 DevSecOps 之旅，或是負責領導企業轉型計畫，本書都能提供在生產環境規模下保護軟體交付所需的架構指引與實務技術。

您將學到的內容

• 設計並建置遵循 Zero-Trust 原則的 CI/CD 管線
• 保護原始碼儲存庫、secrets、身分識別與開發工作流程
• 在 CI/CD 管線中實作 SAST、DAST、SCA、SBOM 產生與 artifacts 簽署
• 運用加密驗證與政策強制執行機制保護軟體供應鏈
• 為受監管環境設計企業級 DevSecOps 架構
• 大規模實作治理、合規與持續安全性驗證

本書適用對象

資深 DevOps 工程師、雲端與平台工程師、安全性工程師、DevSecOps 架構師、安全架構師、CISO 與安全性經理、合規與治理架構師

作者簡介

Avdhesh Kumar Bhardwaj is a Vice President and DevSecOps Engineering Leader at Truist Bank, where he leads enterprise-scale initiatives focused on secure software delivery, cloud-native security, and Zero-Trust CI/CD architectures. With more than 20 years of experience in DevOps, cybersecurity, cloud engineering, and automation, he specializes in building secure, scalable, and compliant software delivery platforms for highly regulated industries, including financial services.
His expertise includes DevSecOps, Kubernetes security, software supply chain security, runtime threat detection, Infrastructure as Code (IaC) security, SBOM validation, and AI-driven security automation. He has authored multiple peer-reviewed research papers published through IEEE and other international conferences on topics including AI-powered threat detection, Zero-Trust DevSecOps, ransomware detection, and secure software delivery.
Avdhesh serves as a reviewer, editor, and technical speaker for international conferences and journals, actively contributing to the advancement of secure software engineering practices. His work bridges academic research with real-world enterprise implementation, helping organizations build resilient, secure, and intelligent software delivery ecosystems.

作者簡介(中文翻譯)

Avdhesh Kumar Bhardwaj 是 Truist Bank 的副總裁兼 DevSecOps 工程主管，負責領導企業級計畫，專注於安全軟體交付、雲原生安全，以及零信任（Zero-Trust）CI/CD 架構。他在 DevOps、資安、雲端工程與自動化領域擁有超過 20 年經驗，專長是為金融服務等高度受監管產業，建構安全、可擴充且符合規範的軟體交付平台。

他的專業領域包括 DevSecOps、Kubernetes 安全性、軟體供應鏈安全、執行階段威脅偵測、基礎架構即程式碼（Infrastructure as Code，IaC）安全性、SBOM 驗證，以及 AI 驅動的安全自動化。他曾撰寫多篇經同儕審查的研究論文，並發表於 IEEE 及其他國際會議，研究主題涵蓋 AI 驅動的威脅偵測、零信任 DevSecOps、勒索軟體偵測，以及安全軟體交付。

Avdhesh 擔任國際會議與期刊的審稿人、編輯及技術講者，積極促進安全軟體工程實務的發展。他的工作串聯學術研究與真實世界的企業導入，協助組織建構具韌性、安全且智慧化的軟體交付生態系統。

類似商品

最後瀏覽商品 (7)