Secure engineering and threat modeling
Let’s get started!
Problem
How can we incorporate security early in the application’s conceptualization and development cycle?
Context
In the current scenario, enterprises need to continuously incorporate customer feedback and deliver new capabilities faster. In cloud-native development, applications are developed in an agile model with continuous integration (CI) and continuous delivery (CD). Traditionally security was considered an afterthought or referred to as bolt-on security. Unlike traditional approaches for meeting the demands of the modern world, development and operations need to come together as DevOps. As described in Figure 8.2, the model is often referred to as shift left security, which essentially means considering security early in this approach during the stages of conceptualization, design, development, and deployment – that is, DevSecOps. This will ensure that the application is securely developed...