Cloud Native Application Protection Platforms Russ Miles, Stephen Giguere, Taylor Smith

Cloud Native Application Protection Platforms Russ Miles, Stephen Giguere, Taylor Smith - okladka książki

Autorzy:: Russ Miles, Stephen Giguere, Taylor Smith
Wydawnictwo:: O'Reilly Media (Z chęcią przeczytam książkę w języku polskim)
Ocena:: Bądź pierwszym, który oceni tę książkę
Stron:: 206
Dostępne formaty:: ePub

Mobi

Ebook

186,15 zł ~~219,00 zł~~ (-15%)

29,90 zł najniższa cena z 30 dni

Dodaj do koszyka lub Kup na prezent Kup 1-kliknięciem

Przenieś na półkę

Do przechowalni

Cloud native security isn't a game for individual players. It requires team collaboration with a platform that can help cloud security engineers, developers, and operations people do their best work. That's what the cloud native application protection platform (CNAPP) delivers. With this practical guide, you'll learn how CNAPPs can help you consolidate security through DevSecOps across cloud native technologies, practices, and application lifecycles.

Through real-life attack scenarios, authors Russ Miles, Steve Giguere, and Taylor Smith help you explore how CNAPP not only mitigates multidimensional threats, but also reduces complexity and helps your team stay one step ahead of attackers. CNAPP provides a holistic approach to your cloud native development across identities, workloads, networks, and infrastructure.

With this book, you will:

Examine threats to different parts of the cloud native stack, including pipelines, supply chains, infrastructure, workloads, and applications
Learn what CNAPP is and how it enables the context-sharing and collaboration necessary to secure your applications from development to runtime
Assess your own attack surface from a code and runtime standpoint
Identify blind spots in your existing cloud native security coverage
Leverage CNAPP to achieve a holistic, collaborative security environment

Wybrane bestsellery

O autorze książki

Taylor Smith is a machine learning enthusiast with over five years of experience who loves to apply interesting computational solutions to challenging business problems. Currently working as a principal data scientist, Taylor is also an active open source contributor and staunch Pythonista.

Russ Miles, Stephen Giguere, Taylor Smith - pozostałe książki

Promocja Promocja 2za1

Most companies work hard to avoid costly failures, but in complex systems a better approach is to embrace and learn from them. Through chaos engineering, you can proactively hunt for evidence of system weaknesses before they trigger a crisis. This practical book shows software developers and system administrators how to plan and run successful chao
- ePub + Mobi
Learning Chaos Engineering. Discovering and Overcoming System Weaknesses Through Experimentation

Russ Miles

(29,90 zł najniższa cena z 30 dni)

169.14 zł ~~199.00 zł (-15%)~~
Promocja Promocja 2za1

A supervised learning task infers a function from flagged training data and maps an input to an output based on sample input-output pairs. In this book, you will learn various machine learning techniques (such as linear and logistic regression) and gain the practical knowledge you need to quickly and powerfully apply algorithms to new problems.
- PDF + ePub + Mobi
Supervised Machine Learning with Python. Develop rich Python coding practices while exploring supervised machine learning

Taylor Smith

(29,90 zł najniższa cena z 30 dni)

71.91 zł ~~79.89 zł (-10%)~~
Promocja Promocja 2za1

Książka "UML 2.0. Wprowadzenie" w praktyczny sposób przedstawia techniki modelowania systemów informatycznych za pomocą języka UML 2.0.
- PDF + ePub + Mobi
- Druk
UML 2.0. Wprowadzenie

Russ Miles, Kim Hamilton

(9,90 zł najniższa cena z 30 dni)

20.35 zł ~~37.00 zł (-45%)~~
Promocja Promocja 2za1

Oto podręcznik, który dzięki innowacyjnym metodom przekazywania wiedzy sprawi, że szybko zrozumiesz proces wytwarzania oprogramowania i nauczysz się gładko podążać jego wyboistą ścieżką. Autorzy książki „Head First Software Development. Edycja polska” — Dan i Russ — pokażą Ci, w jaki sposób zadowolić klienta i zebrać od niego wymagania oraz określić jego potrzeby. Dowiesz się, jak zapanować nad poszczególnymi wersjami Twojego projektu.
- PDF
- Druk
Head First Software Development. Edycja polska

Dan Pilone, Russ Miles

(19,90 zł najniższa cena z 30 dni)

37.95 zł ~~69.00 zł (-45%)~~
Promocja Promocja 2za1

Even the best developers have seen well-intentioned software projects fail -- often because the customer kept changing requirements, and end users didn't know how to use the software you developed. Instead of surrendering to these common problems, let Head First Software Development guide you through the best practices of software development. Befo
- ePub + Mobi
Head First Software Development. A Learner's Companion to Software Development

Dan Pilone, Russ Miles

(29,90 zł najniższa cena z 30 dni)

135.15 zł ~~159.00 zł (-15%)~~
Promocja Promocja 2za1

"Since its original introduction in 1997, the Unified Modeling Language has revolutionized software development. Every integrated software development environment in the world--open-source, standards-based, and proprietary--now supports UML and, more importantly, the model-driven approach to software development. This makes learning the newest UML
- ePub + Mobi
Learning UML 2.0

Russ Miles, Kim Hamilton

(29,90 zł najniższa cena z 30 dni)

118.15 zł ~~139.00 zł (-15%)~~
Promocja Promocja 2za1

When Object Oriented programming (OO) first appeared, it was a revelation. OO gave developers the ability to create software that was more flexible and robust, but as time went on and applications became more sophisticated, too, certain areas of "traditional" OO architectures were found wanting. Aspect-oriented programming (AOP) addresses those iss
- ePub + Mobi
AspectJ Cookbook

Russ Miles

(29,90 zł najniższa cena z 30 dni)

135.15 zł ~~159.00 zł (-15%)~~

Ebooka "Cloud Native Application Protection Platforms" przeczytasz na:

czytnikach Inkbook, Kindle, Pocketbook, Onyx Boox i innych
systemach Windows, MacOS i innych

systemach Windows, Android, iOS, HarmonyOS
na dowolnych urządzeniach i aplikacjach obsługujących formaty: PDF, EPub, Mobi

Masz pytania? Zajrzyj do zakładki Pomoc »

Oceny i opinie klientów: Cloud Native Application Protection Platforms Russ Miles, Stephen Giguere, Taylor Smith

(0)

Szczegóły książki

ISBN Ebooka:: 978-10-981-4166-0, 9781098141660
Data wydania ebooka :: 2024-09-13 Data wydania ebooka często jest dniem wprowadzenia tytułu do sprzedaży i może nie być równoznaczna z datą wydania książki papierowej. Dodatkowe informacje możesz znaleźć w darmowym fragmencie. Jeśli masz wątpliwości skontaktuj się z nami sklep@ebookpoint.pl.
Język publikacji:: angielski
Rozmiar pliku ePub:: 10MB
Rozmiar pliku Mobi:: 19.9MB

Zgłoś erratę

Kategorie

Kliknij, aby zgłosić błędnie przypisaną kategorię »

Informatyka » Programowanie » Programowanie w chmurze

Dostępność produktu

Produkt nie został jeszcze oceniony pod kątem ułatwień dostępu lub nie podano żadnych informacji o ułatwieniach dostępu lub są one niewystarczające. Prawdopodobnie Wydawca/Dostawca jeszcze nie umożliwił dokonania walidacji produktu lub nie przekazał odpowiednich informacji na temat jego dostępności.

Spis treści książki

Preface
- Who Should Read This Book
- Why We Wrote This Book
- Navigating This Book
- Whats Not in This Book
- Important Terms
- A Brief Cloud Native and CNAPP Primer
  - Cloud Native
  - DevOps, IaC, and Bears, Oh My!
  - Securing the Whole Deal Is Hard!
  - Enter the Cloud Native Application Protection Platform
- Conventions Used in This Book
- Using Code Examples
- OReilly Online Learning
- How to Contact Us
- Acknowledgements
1. Cloud Security, the Collaborative Game
- The Cloud Native Security Game
- How a Play Is Made: The Anatomy of an Attack
  - Meet the Attackers: Actors and Vectors
  - The Attackers Moves
    - Gaining initial access
    - Establishing the foothold
    - Escalating Privilege
    - Executing the attack
- Broad, Deep, and Complex: The Cloud Native Security Game Board
  - First, a Pinch of Structure: The Cloud Native Stack
  - Second, a Smattering of Speed: Lifecycles
  - To Season, Add Some Open Source
  - Open Source: Easy Button for Growth, but at What Risk?
  - Your (Insecure) Dish Is Ready: From Shallow to Defense in Depth
  - The Attack Surface Is Broad
- Your Team: Cloud Security, Operations Security, and Development Security
  - From Code to Cloud: Cloud Security Engineers + Security-Aware Developers + Security Operations
  - Your Team, Siloed
    - Working in silos
    - Tooling gaps
- DevSecOps: Whoever Collaborates Best and Learns Fastest, Wins
- Collaboration and Emergence
- Who OODAs Best, Wins
- Your CNAPP Enables Your Cloud Native Security OODA Loop
- Losing Our Cloud Native Security Game
2. Playing to Win with Context and Collaboration
- Surfacing and Observing Your Security
  - Observing Your System
  - Combining Observing with Security Advice
- CNAPP Policies: From Observing to Orienting, Deciding, and Acting
  - Orient Through CNAPP Policy Pattern-Matching
  - Triggering Cross-Team Decisions and Actions
- Acronyms, Assemble! Key Terms and Definitions
- Back to Our Security Breach
  - Lost in Translation
  - Winning with Shared Security Context and Collaboration
3. A Shadow Cloud Emerges: Immediate Visibility, Maintaining Control
- Notable by Its Absence
- Characteristics of a Shadow Cloud
- Cloud Security Posture
- Surfacing Your Cloud of Curiosities
  - Observe: Identifying the Assets
  - Orient: Identifying Threats and Vulnerabilities
  - Decide: Analyzing, Categorizing, and Prioritizing the Risks
  - Act: Connecting Your CNAPP to the Action Through Integrations
  - Learn: New Problems, New Policies, New ControlsNew Loops
- Rinse and Repeat, Continuously
- From Continuously Reacting, to Continuously Proacting
4. Preventing Risk Early
- The Interface Between Security and Development Work
  - Comparing the Developer and Security Domain Languages
  - CNAPP as an Anti-Corruption Layer
  - Respecting the Goals of Effective Security and Development Teams
  - Team Interaction Modes
- CNAPP as a Development Collaborator
  - Inspecting Your CNAPP Policies
  - Surfacing Security Where You Work
  - Security Awareness and Immediate Fixes in the IDE
  - When a PR Is Born
  - Checks and Balances in the Build
  - Scope, Feedback, and (Helpful) Blame
  - Automatically Updating Your Security Posture
5. Securing Your Supply Chain
- Introducing Your Cloud Native Supply Chain
  - Your House of (Cards) Supply Chains
  - How Supply Chain Attacks Work
  - Rapid Release, Rapid Vulnerabilities
  - From Trust, through Fear and Suspicion, to Proactive Exploration and Resolution
- Fear and Loathing in Dependencies
- Making the Invisible Visible: CNAPP Software Composition Analysis
- Building a Cloud Native SBOM (Software Bill of Materials)
- Completing the SCA OODA Loop
- From the Packages to the Packager
6. Continuous Delivery, Continuous Insecurity
- CI/CD Pipelines: The Arteries of Production
- The Purpose of a CI/CD Pipeline
  - Understanding CI/CD
  - Where Are My Risks?
  - Real-World Examples
    - Codecov
    - SolarWinds
- CI/CD Under the Lens of your CNAPP
- From Pipelines to Production
7. Protecting Your Runtime
- Cloud Security Posture Management
- Cloud Workload Protection Platforms
- Cloud Infrastructure Entitlement Management
- Runtime Security Requirements in a CNAPP
- All for One and One for All Runtime Security
- Whats Under the Hood?
  - Agent-Based Security
  - Agentless Security
  - Better Together
  - What Is an Attack Path?
- From Breadth and Depth to (Data) Depth
8. Data Security Posture Management
- Introduction to DSPM
  - What Is Sensitive Data?
    - Personal information
    - Corporate and government information
  - The Evolution of Data Security in Cloud Environments
- How Does DSPM Work?
  - Data Discovery
  - Data Classification
  - Establishment and Application of Security Policies
- AI and DSPM Sittin in a Tree
- How Much Better Could It Have Been?
  - Equifax Breach (2017)
    - What happened
    - How DSPM could have helped
  - Marriott International (2018)
    - What happened
    - How DSPM could have helped
  - Capital One (2019)
    - What happened
    - How DSPM could have helped
- DSPM Is a Platform Solution
- Isnt an LLM Also Data?
- Exposing the Heart of Our Problems: Data Theft and Data Laundering
9. Building a CNAPP Culture
- From Slow Culture War to Fast Culture Collaboration
  - Gene Kims Contributions
  - Insights from Team Topologies
  - Determining Root Causes
  - A CNAPP Is the Doctor
  - A CNAPP is Cost-Centric Security
  - Security Chaos Engineering
  - Disparate Tools Lead to Security Theater
    - Total cost of ownership (TCO)
    - How to avoid this scenario
- A CNAPP Makes the (Security) Team Work
Index