DevSecOps on Sven Ruppert

Introduction to the Linux Foundation's SLSA project

sven.ruppert@gmail.com (Sven Ruppert) — Sat, 10 Dec 2022 21:56:43 +0000

Supply Chain Security is a hot topic these days. And more and more, we as developers are dealing with this daily. But what does this mean for us, and how is this influencing our job? I want to give an overview of common attacks against the Software Supply Chain from the developer’s view and will introduce the Open Source project SLSA from the Linux Foundation.

The Power of #JFrog Build Info (Build Metadata)

sven.ruppert@gmail.com (Sven Ruppert) — Fri, 08 Oct 2021 13:42:05 +0000

Intro

This article will take a detailed look at what the term build-info is all about and why it will help us protect against attacks such as the Solarwinds Hack.

SolarWinds hack and the Executive Order from Mr Biden -- And now?

sven.ruppert@gmail.com (Sven Ruppert) — Tue, 27 Jul 2021 11:10:15 +0000

In the past two years, we have had to learn a lot about cybersecurity. The new attack vectors are becoming more and more sophisticated and are directed more and more against the value chain in general. But what does that mean for us? What can be done about it, and what reactions have the state already taken?

What is the difference between SAST, DAST, IAST and RASP?

sven.ruppert@gmail.com (Sven Ruppert) — Mon, 19 Jul 2021 15:34:30 +0000

Intro:

In this post, we’re going to look at the differences between the various cybersecurity defence techniques. Here you can identify four main groups, which we will go through briefly one after another to illustrate the advantages and disadvantages.

The Lifeline of a Vulnerability

sven.ruppert@gmail.com (Sven Ruppert) — Fri, 25 Jun 2021 16:17:29 +0000

Intro
#

Again and again, we read something in the IT news about security gaps that have been found. The more severe the classification of this loophole, the more attention this information will get in the general press. Most of the time, you don’t even hear or read anything about all the security holes found that are not as well known as the SolarWinds Hack, for example. But what is the typical lifeline of such a security gap?

CVSS - explained - the Basics

sven.ruppert@gmail.com (Sven Ruppert) — Wed, 07 Apr 2021 12:20:21 +0000

Intro
#

What is the Common Vulnerability Scoring System short called CVSS, who is behind it, what are we doing with it and what a CVSS Value means for you? I will explain how a CVSS Score is calculated, what the different elements of it mean and what are the differences between the different CVSS versions.

A Challenge of the Software Distribution

sven.ruppert@gmail.com (Sven Ruppert) — Sun, 14 Feb 2021 14:03:57 +0000

The four factors that are working against us
#

Software development is more and more dependent on Dependencies and the frequency of deployments is increasing. Both trends together are pushing themselves higher. Another element that turns the delivery of software into a network bottleneck is the usage of compounded artefacts. And the last trend that is working against us, is the exploding amount of edges or better-called edge nodes.All four trends together are a challenge for the infrastructure.But what we could do against it?

DevSecOps - Be Independent Again

sven.ruppert@gmail.com (Sven Ruppert) — Fri, 12 Feb 2021 18:06:03 +0000

What do the effects the news of the last few months can have to do with risk management and the presumption of storage, and why is it an elementary component of DevSecOps?

The quick Wins of DevSecOps

sven.ruppert@gmail.com (Sven Ruppert) — Thu, 28 Jan 2021 16:56:45 +0000

Hello and welcome to my DevSecOps post. Here in Germany, it’s winter right now, and the forests are quiet. The snow slows down everything, and it’s a beautiful time to move undisturbed through the woods.

DevSecOps on Sven Ruppert

Introduction to the Linux Foundation's SLSA project

The Power of #JFrog Build Info (Build Metadata)

SolarWinds hack and the Executive Order from Mr Biden -- And now?

What is the difference between SAST, DAST, IAST and RASP?

The Lifeline of a Vulnerability

Intro #

CVSS - explained - the Basics

Intro #

A Challenge of the Software Distribution

The four factors that are working against us #

DevSecOps - Be Independent Again

The quick Wins of DevSecOps

Intro
#

Intro
#

The four factors that are working against us
#