Course Outline
Day One:
Introduction
DevSecOps at a Glance
- CI (Continuous Integration) and CD (Continuous Delivery)
- Shifting security to the left, the DevOps way
DevSecOps Method Theories
- Security for DevOps technologies
- When and how security interacts with the application and the development lifecycle
- Shared ownership of security responsibilities and activities
Day Two:
DevSecOps with Jenkins
- Creating an agent
- Creating a pipeline job
- Using SYNK and SonarQube for SAST security scanning
- Using Arachini and OWASP-ZAP for DAST security scanning
- Using Anchore and Aqua MicroScanner for image security scanning
- Developing a DevSecOps pipeline
- Enabling CI and CD
Security Automation
- Automating security testing with Gaunit
- Running an automated attack
Application Security Automation
- Automating and refactoring XSS attack
- Automating SQLi attack
- Automating a fuzzer
- Testing security in software delivery pipelines
Summary and Conclusion
Requirements
- An understanding of the DevOps process
Audience
- DevOps
Testimonials
It gave me a better understanding of Zabbix monitoring
- Leicestershire County Council
Firstly, learners will sum up their experience in the game, explain it carefully, and gain a deeper understanding of knowledge.
优 翟
Edutainment
莎娜 陶
Hands-on part
纪鹏 曾
Time to exchange information between participants.
Gabriel Tendera
references to the trainer's design experience while discussing specific issues
Techland sp. z o.o.;
Real-life examples.
Techland sp. z o.o.;
Examples and / or hypothetical use of the discussed concepts.
Techland sp. z o.o.;
Everything. It was very understandable, and if we didn't understand something, Adriano explained it.
Zsolt Nagy - W.UP Kft
I understand (almost) everything which Adriano explained us. Good tematics, understandable presentation.
- W.UP Kft
The use case based approach and the trainer's up to date knowledge base.