Get in Touch

Course Outline

Day 01

Introduction

Overview of DevSecOps

  • CI (Continuous Integration) and CD (Continuous Delivery)
  • Shifting security to the left, the DevOps way

DevSecOps Methodologies

  • Security considerations for DevOps technologies
  • Timing and methods of security interaction with the application and development lifecycle
  • Shared ownership of security responsibilities and activities

Day 02

Implementing DevSecOps with Jenkins

  • Creating an agent
  • Creating a pipeline job
  • Utilizing SYNK and SonarQube for SAST security scanning
  • Utilizing Arachni and OWASP-ZAP for DAST security scanning
  • Utilizing Anchore and Aqua MicroScanner for image security scanning
  • Developing a DevSecOps pipeline
  • Enabling CI and CD

Security Automation

  • Automating security testing with Gaunit
  • Executing an automated attack

Application Security Automation

  • Automating and refactoring XSS attacks
  • Automating SQLi attacks
  • Automating a fuzzer
  • Testing security within software delivery pipelines

Summary and Next Steps

Requirements

  • A foundational understanding of the DevOps process.

Audience

  • DevOps professionals
 14 Hours

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories