Browse Definitions :
Definition

rugged DevOps

Contributor(s): Matthew Haughn

Rugged DevOps is an approach to software development that places a priority on ensuring that code is secure at all stages of the software development lifecycle. Rugged DevOps takes the lean thinking and Agile mindset that DevOps embraces and applies it to "ruggedizing" software and making sure that security is not a post-development consideration. Rugged DevOps is often used in software development for cloud environments.The rugged approach requires programmers and operations team members to possess a high degree of security awareness and have the ability to automate testing throughout the software development lifecycle. Despite a large percentage of the IT industry adopting agile and DevOps processes, security testing cycles are still often based on the traditional waterfall approach. This means many organizations forget to do security qualifications tests, such as PCI DSS compliance checks and risk assessments, until it's almost too late.

To sync security with DevOps cycles, a rugged DevOps team must log integration and delivery processes at a very granular level, so security issues can be identified as they arise. The more granular the records are, the easier it becomes to identify security holes. Both Jira and Cucumber are popular tools for keeping logs in rugged DevOps environments. For automated DevOps and security testing, there's a large portfolio of product types, including static application security testing, dynamic application security testing, interactive application security testing and runtime application security testing. Vendors include Contrast Security, Fortify, Veracode and Waratek.

DevOps Security Process

With the increasing use of continuous software development, more code is produced and used for longer than expected or in unintended ways. Rugged DevOps allows for secure code to be produced more reliably with fewer revisions.

Rugged DevOps is sometimes referred to as DevSecOps or Secure DevOps, but not everyone agrees the three terms are synonymous. All three value security as a component in continuous software development, but only the rugged DevOps approach makes "security first" a priority, pen tests throughout development and purposely seeks to produce a hardened end product.

rugged DevOps
This was last updated in November 2017

Continue Reading About rugged DevOps

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

Powered by:

SearchCompliance

  • compliance audit

    A compliance audit is a comprehensive review of an organization's adherence to regulatory guidelines.

  • regulatory compliance

    Regulatory compliance is an organization's adherence to laws, regulations, guidelines and specifications relevant to its business...

  • Whistleblower Protection Act

    The Whistleblower Protection Act of 1989 is a law that protects federal government employees in the United States from ...

SearchSecurity

  • Cybercrime

    Cybercrime is any criminal activity that involves a computer, networked device or a network.

  • data breach

    A data breach is a confirmed incident in which sensitive, confidential or otherwise protected data has been accessed and/or ...

  • zero-day (computer)

    A zero-day vulnerability, also known as a computer zero day, is a flaw in software, hardware or firmware that is unknown to the ...

SearchHealthIT

SearchDisasterRecovery

  • cloud insurance

    Cloud insurance is any type of financial or data protection obtained by a cloud service provider. 

  • business continuity software

    Business continuity software is an application or suite designed to make business continuity planning/business continuity ...

  • business continuity policy

    Business continuity policy is the set of standards and guidelines an organization enforces to ensure resilience and proper risk ...

SearchStorage

  • business impact analysis (BIA)

    Business impact analysis (BIA) is a systematic process to determine and evaluate the potential effects of an interruption to ...

  • RAID (redundant array of independent disks)

    RAID (redundant array of independent disks) is a way of storing the same data in different places on multiple hard disks to ...

  • dedicated cloud

    A dedicated cloud is a single-tenant cloud infrastructure, which essentially acts as an isolated, single-tenant public cloud.

Close