WEBVTT

1
00:00.000 --> 00:03.840
There sure is a lot of information to cover when it comes to software

2
00:03.840 --> 00:05.120
development lifecycle,

3
00:05.120 --> 00:09.460
continuous integration, continuous development, and make it sure that the depth

4
00:09.460 --> 00:09.980
security

5
00:09.980 --> 00:14.320
ops are all happy in synchronous with each other.

6
00:14.320 --> 00:17.440
So that's why I wanted to be able to go through and do a review with you to be

7
00:17.440 --> 00:18.080
able to close

8
00:18.080 --> 00:20.160
out of this skill.

9
00:20.160 --> 00:24.350
First up, we need to remember that software development methodologies follow a

10
00:24.350 --> 00:24.760
specific

11
00:24.760 --> 00:27.950
pattern in making sure that regardless of the cloud infrastructure or

12
00:27.950 --> 00:28.640
environment that

13
00:28.640 --> 00:33.880
we're using, whether it be software, platform, or infrastructure as a service,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

13
00:28.640 --> 00:33.880
we're using, whether it be software, platform, or infrastructure as a service,

14
00:33.880 --> 00:34.360
everything

15
00:34.360 --> 00:40.040
is secure based across the board and implemented with new programs and

16
00:40.040 --> 00:42.000
development in a controlled

17
00:42.000 --> 00:43.160
fashion.

18
00:43.160 --> 00:46.690
We want to define our security requirements, make sure that everything along

19
00:46.690 --> 00:47.280
the coding

20
00:47.280 --> 00:51.890
is secure for input validation, access controls, and make sure that we're

21
00:51.890 --> 00:52.960
constantly logging

22
00:52.960 --> 00:58.050
and comparing those logs to everything else for the before and after of what's

23
00:58.050 --> 00:58.600
actually

24
00:58.600 --> 00:59.600
going on.

25
00:59.600 --> 01:02.620
This is a recurrent theme through the rest of everything that we learned inside
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

25
00:59.600 --> 01:02.620
This is a recurrent theme through the rest of everything that we learned inside

26
01:02.620 --> 01:02.960
of this

27
01:02.960 --> 01:08.200
skill because then we moved on into software development lifecycle.

28
01:08.200 --> 01:12.540
Now generically, there is a software development lifecycle that covers basic

29
01:12.540 --> 01:13.480
implementation

30
01:13.480 --> 01:18.110
of software and its development, but within the Cisco world, especially in

31
01:18.110 --> 01:18.920
continuous

32
01:18.920 --> 01:24.590
implementation and continuous development, we have a more circular pattern that

33
01:24.590 --> 01:25.080
we're

34
01:25.080 --> 01:26.080
following.

35
01:26.080 --> 01:29.760
Consistently, we'll always be planning and we're going to be following that up

36
01:29.760 --> 01:31.080
with design,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

36
01:29.760 --> 01:31.080
with design,

37
01:31.080 --> 01:36.040
develop, test, deploy, review in that continuous circle and going for launch

38
01:36.040 --> 01:37.440
right afterwards.

39
01:37.440 --> 01:42.050
And this ties into our continuous integration and continuous development where

40
01:42.050 --> 01:43.200
we are constantly

41
01:43.200 --> 01:48.440
trying to integrate into the live environment for continuous integration.

42
01:48.440 --> 01:51.540
Then being the key word and making sure that we're understanding that we're

43
01:51.540 --> 01:52.520
going into something

44
01:52.520 --> 01:55.120
that's actively out there already.

45
01:55.120 --> 01:58.350
But we don't want to do so without having developed it in continuous

46
01:58.350 --> 01:59.440
development and making

47
01:59.440 --> 02:03.530
sure that it's properly tested and security checked before it actually enters
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

47
01:59.440 --> 02:03.530
sure that it's properly tested and security checked before it actually enters

48
02:03.530 --> 02:03.920
into the

49
02:03.920 --> 02:04.920
real world.

50
02:04.920 --> 02:08.760
So we want to try to sandbox it as much as we can test it for flaws, do it

51
02:08.760 --> 02:09.960
before and after

52
02:09.960 --> 02:14.680
and apply the software development lifecycle process that we just previously

53
02:14.680 --> 02:16.360
learned about.

54
02:16.360 --> 02:20.410
Now we want to be able to go through and do a live action check and that's

55
02:20.410 --> 02:21.480
where we had

56
02:21.480 --> 02:25.120
network services orchestrator as an example.

57
02:25.120 --> 02:27.040
But there are many other programs out there.

58
02:27.040 --> 02:31.680
I would that was just one of many, which brings us into DevSecOps to be able to
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

58
02:27.040 --> 02:31.680
I would that was just one of many, which brings us into DevSecOps to be able to

59
02:31.680 --> 02:32.200
give us

60
02:32.200 --> 02:36.690
the final go ahead on actual security practices, tying everything up so far

61
02:36.690 --> 02:37.760
that we've learned

62
02:37.760 --> 02:43.340
into a neat little bow for the actual overall organization and our cloud

63
02:43.340 --> 02:44.680
environment.

64
02:44.680 --> 02:48.260
Just on that and everything else that we've covered up to this point inside of

65
02:48.260 --> 02:49.120
securing cloud

66
02:49.120 --> 02:52.040
platforms for our Cisco environment.

67
02:52.040 --> 02:56.060
I know that each and every one of you out there can definitely go through and

68
02:56.060 --> 02:56.560
do live

69
02:56.560 --> 03:00.800
implementation and live security checks along with making sure that everything
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

69
02:56.560 --> 03:00.800
implementation and live security checks along with making sure that everything

70
03:00.800 --> 03:01.640
is tested,

71
03:01.640 --> 03:06.390
logged and create standard operating procedures for all the different things

72
03:06.390 --> 03:07.360
within our actual

73
03:07.360 --> 03:08.680
environment.

74
03:08.680 --> 03:11.850
And with all the additional stuff that we have for examples, feel free to go

75
03:11.850 --> 03:12.320
back and

76
03:12.320 --> 03:15.620
take a look at it and practice some of those labs on your own in those

77
03:15.620 --> 03:16.880
different environment

78
03:16.880 --> 03:17.880
forums.

79
03:17.880 --> 03:22.860
Pick out a different lab, pick out a different device and go through everything

80
03:22.860 --> 03:23.320
that we've

81
03:23.320 --> 03:24.920
already covered.

82
03:24.920 --> 03:25.920
See you in the next one.

83
03:25.920 --> 03:28.680
I hope this has been a form of for you and I'd like to thank you for viewing.
