Security testing in DevOps

Before we continue to talk about security testing in nowadays, you must aware
traditional security can't fit in DevOps.  Because the  major traditional security control
rely on "Separation of Duty", it is conflict with DevOps "take full responsibility".
Security must Change or Die in DevOps.

Emerging patterns for security in a DevOps world

Traditional Security	DevSecOps
Embrace secrecy	Create Feedback Loops
Just Pass Audit!	Compliance adds Value
Enforce Stability	Create Chaos
Build a wall	Zero Trust Network
Slow Validation	Fast and Non-blocking
Certainly Testing	Adversity Testing
Test when Done	Shift Left
Process Driven	The Paved Road