Browse Definitions :
Definition

rugged DevOps

Contributor(s): Matthew Haughn

Rugged DevOps is an approach to software development that places a priority on ensuring that code is secure at all stages of the software development lifecycle. Rugged DevOps takes the lean thinking and Agile mindset that DevOps embraces and applies it to "ruggedizing" software and making sure that security is not a post-development consideration. Rugged DevOps is often used in software development for cloud environments.The rugged approach requires programmers and operations team members to possess a high degree of security awareness and have the ability to automate testing throughout the software development lifecycle. Despite a large percentage of the IT industry adopting agile and DevOps processes, security testing cycles are still often based on the traditional waterfall approach. This means many organizations forget to do security qualifications tests, such as PCI DSS compliance checks and risk assessments, until it's almost too late.

To sync security with DevOps cycles, a rugged DevOps team must log integration and delivery processes at a very granular level, so security issues can be identified as they arise. The more granular the records are, the easier it becomes to identify security holes. Both Jira and Cucumber are popular tools for keeping logs in rugged DevOps environments. For automated DevOps and security testing, there's a large portfolio of product types, including static application security testing, dynamic application security testing, interactive application security testing and runtime application security testing. Vendors include Contrast Security, Fortify, Veracode and Waratek.

DevOps Security Process

With the increasing use of continuous software development, more code is produced and used for longer than expected or in unintended ways. Rugged DevOps allows for secure code to be produced more reliably with fewer revisions.

Rugged DevOps is sometimes referred to as DevSecOps or Secure DevOps, but not everyone agrees the three terms are synonymous. All three value security as a component in continuous software development, but only the rugged DevOps approach makes "security first" a priority, pen tests throughout development and purposely seeks to produce a hardened end product.

rugged DevOps
This was last updated in November 2017

Continue Reading About rugged DevOps

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

SearchCompliance

  • risk management

    Risk management is the process of identifying, assessing and controlling threats to an organization's capital and earnings.

  • compliance as a service (CaaS)

    Compliance as a Service (CaaS) is a cloud service service level agreement (SLA) that specified how a managed service provider (...

  • data protection impact assessment (DPIA)

    A data protection impact assessment (DPIA) is a process designed to help organizations determine how data processing systems, ...

SearchSecurity

  • Web application firewall (WAF)

    A web application firewall (WAF) is a firewall that monitors, filters and blocks data packets as they travel to and from a ...

  • spyware

    Spyware is a type of malicious software -- or malware -- that is installed on a computing device without the end user's knowledge.

  • application whitelisting

    Application whitelisting is the practice of specifying an index of approved software applications or executable files that are ...

SearchHealthIT

SearchDisasterRecovery

  • business continuity plan (BCP)

    A business continuity plan (BCP) is a document that consists of the critical information an organization needs to continue ...

  • disaster recovery team

    A disaster recovery team is a group of individuals focused on planning, implementing, maintaining, auditing and testing an ...

  • cloud insurance

    Cloud insurance is any type of financial or data protection obtained by a cloud service provider. 

SearchStorage

  • DRAM (dynamic random access memory)

    Dynamic random access memory (DRAM) is a type of semiconductor memory that is typically used for the data or program code needed ...

  • RAID 10 (RAID 1+0)

    RAID 10, also known as RAID 1+0, is a RAID configuration that combines disk mirroring and disk striping to protect data.

  • PCIe SSD (PCIe solid-state drive)

    A PCIe SSD (PCIe solid-state drive) is a high-speed expansion card that attaches a computer to its peripherals.

Close