Devsecops on Sven Ruppert

Contextual Analysis in Cybersecurity

sven.ruppert@gmail.com (Sven Ruppert) — Mon, 05 Feb 2024 17:49:29 +0000

Contextual analysis in cybersecurity involves examining events, actions, or data within the broader context of an organization’s IT environment. It is a critical component of a proactive cybersecurity strategy, aiming to understand the significance of activities by considering various factors surrounding them. This multifaceted approach helps cybersecurity professionals identify and respond to potential threats effectively.

Introduction to the Linux Foundation's SLSA project

sven.ruppert@gmail.com (Sven Ruppert) — Sat, 10 Dec 2022 21:56:43 +0000

Supply Chain Security is a hot topic these days. And more and more, we as developers are dealing with this daily. But what does this mean for us, and how is this influencing our job? I want to give an overview of common attacks against the Software Supply Chain from the developer’s view and will introduce the Open Source project SLSA from the Linux Foundation.

The Power of #JFrog Build Info (Build Metadata)

sven.ruppert@gmail.com (Sven Ruppert) — Fri, 08 Oct 2021 13:42:05 +0000

Intro

This article will take a detailed look at what the term build-info is all about and why it will help us protect against attacks such as the Solarwinds Hack.

SolarWinds hack and the Executive Order from Mr Biden -- And now?

sven.ruppert@gmail.com (Sven Ruppert) — Tue, 27 Jul 2021 11:10:15 +0000

In the past two years, we have had to learn a lot about cybersecurity. The new attack vectors are becoming more and more sophisticated and are directed more and more against the value chain in general. But what does that mean for us? What can be done about it, and what reactions have the state already taken?

What is the difference between SAST, DAST, IAST and RASP?

sven.ruppert@gmail.com (Sven Ruppert) — Mon, 19 Jul 2021 15:34:30 +0000

Intro:

In this post, we’re going to look at the differences between the various cybersecurity defence techniques. Here you can identify four main groups, which we will go through briefly one after another to illustrate the advantages and disadvantages.