MARC details
| 000 -CABECERA |
|---|
| campo de control de longitud fija |
02865cam a2200229 i 4500 |
| 008 - DATOS DE LONGITUD FIJA--INFORMACIÓN GENERAL |
|---|
| campo de control de longitud fija |
211007s2022 xx o 000 0 eng d |
| 020 ## - NÚMERO INTERNACIONAL ESTÁNDAR DEL LIBRO |
|---|
| Número Internacional Estándar del Libro |
9781032151205 |
| 040 ## - FUENTE DE LA CATALOGACIÓN |
|---|
| Centro/agencia transcriptor |
TBS |
| 041 ## - CÓDIGO DE LENGUA |
|---|
| Código de lengua del texto/banda sonora o título independiente |
eng |
| 050 #4 - SIGNATURA TOPOGRÁFICA DE LA BIBLIOTECA DEL CONGRESO |
|---|
| Número de clasificación |
QA76.9.A25 |
| 100 ## - ENTRADA PRINCIPAL--NOMBRE DE PERSONA |
|---|
| Nombre de persona |
Merkow, Mark S. |
| 9 (RLIN) |
23376 |
| Término indicativo de función/relación |
author |
| 245 10 - MENCIÓN DE TÍTULO |
|---|
| Título |
Practical security for agile and DevOps |
| Mención de responsabilidad, etc. |
/ Mark S. Merkow, CISSP, CISM, CSSLP. |
| 250 ## - MENCIÓN DE EDICIÓN |
|---|
| Mención de edición |
First edition. |
| 260 ## - PUBLICACIÓN, DISTRIBUCIÓN, ETC. |
|---|
| Lugar de publicación, distribución, etc. |
Boca Raton, FL : CRC Press, Taylor and Francis, 2022. |
| 300 ## - DESCRIPCIÓN FÍSICA |
|---|
| Extensión |
xxv, 209 pages : illustrations, graphs, tables (black and white) ; 26 cm. |
| 504 ## - NOTA DE BIBLIOGRAFÍA, ETC. |
|---|
| Nota de bibliografía, etc. |
Includes bibliographical references and index. |
| 505 ## - NOTA DE CONTENIDO CON FORMATO |
|---|
| Nota de contenido con formato |
Today’s software development practices shatter old security practices — Deconstructing Agile and Scrum — Learning is FUNdamental! — Product backlog development — Building security in — Secure design considerations — Security in the design sprint — Defensive programming — Testing part 1 : static code analysis — Testing part 2 : penetration testing/dynamic analysis/IAST/RASP — Securing DevOps — Metrics and models for AppSec maturity — Frontiers for AppSe — AppSec is a marathon—Not a sprint! — Appendix A : security acceptance criteria — Appendix B : resources for AppSec — Appendix C : answers to chapter quick check questions. |
| 520 ## - SUMARIO, ETC. |
|---|
| Sumario, etc. |
This textbook was written from the perspective of someone who began his software security career in 2005, long before the industry began focusing on it. This is an excellent perspective for students who want to learn about securing application development. After having made all the rookie mistakes, the author realized that software security is a human factors issue rather than a technical or process issue alone. Throwing technology into an environment that expects people to deal with it but failing to prepare them technically and psychologically with the knowledge and skills needed is a certain recipe for bad results.<br/><br/>Practical Security for Agile and DevOpsis a collection of best practices and effective implementation recommendations that are proven to work. The text leaves the boring details of software security theory out of the discussion as much as possible to concentrate on practical applied software security that is useful to professionals. It is as much a book for students’ own benefit as it is for the benefit of their academic careers and organizations. Professionals who are skilled in secure and resilient software development and related tasks are in tremendous demand. This demand will increase exponentially for the foreseeable future. As students integrate the text’s best practices into their daily duties, their value increases to their companies, management, community, and industry. |
| 650 #0 - PUNTO DE ACCESO ADICIONAL DE MATERIA--TÉRMINO DE MATERIA |
|---|
| Término de materia o nombre geográfico como elemento de entrada |
Computer security |
| 9 (RLIN) |
2657 |
| 650 #0 - PUNTO DE ACCESO ADICIONAL DE MATERIA--TÉRMINO DE MATERIA |
|---|
| Término de materia o nombre geográfico como elemento de entrada |
Agile software development |
| 9 (RLIN) |
11082 |
| 942 ## - ELEMENTOS DE ENTRADA AGREGADA (KOHA) |
|---|
| Fuente del sistema de clasificación o colocación |
Clasificación de Library of Congress |
