Devsecops for .Net Core: Securing Modern Software Applications
暫譯: .NET Core 的 DevSecOps：保護現代軟體應用程式

Automate core security tasks by embedding security controls and processes early in the DevOps workflow through DevSecOps. You will not only learn the various stages in the DevOps pipeline through examples of solutions developed and deployed using .NET Core, but also go through open source SDKs and toolkits that will help you to incorporate automation, security, and compliance.

The book starts with an outline of modern software engineering principles and gives you an overview of DevOps in .NET Core. It further explains automation in DevOps for product development along with security principles to improve product quality. Next, you will learn how to improve your product quality and avoid code issues such as SQL injection prevention, cross-site scripting, and many more. Moving forward, you will go through the steps necessary to make security, compliance, audit, and UX automated to increase the efficiency of your organization. You'll see demonstrations of the CI phase of DevOps, on-premise and hosted, along with code analysis methods to verify product quality. Finally, you will learn network security in Docker and containers followed by compliance and security standards.

After reading DevSecOps for .NET Core, you will be able to understand how automation, security, and compliance works in all the stages of the DevOps pipeline while showcasing real-world examples of solutions developed and deployed using .NET Core 3.

What You Will Learn

• Implement security for the .NET Core runtime for cross-functional workloads
• Work with code style and review guidelines to improve the security, performance, and maintenance of components
• Add to DevOps pipelines to scan code for security vulnerabilities
• Deploy software on a secure infrastructure, on Docker, Kubernetes, and cloud environments
• Who This Book Is For
  Software engineers and developers who develop and maintain a secure code repository.