Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Day 01
Introduction
An Overview of DevSecOps
- Continuous Integration (CI) and Continuous Delivery (CD)
- Incorporating security early in the development process, the DevOps approach
Theories and Methods of DevSecOps
- Security integration with DevOps technologies
- Timing and methods for incorporating security into application and development lifecycle
- Shared responsibility for security tasks and activities
Day 02
Implementing DevSecOps with Jenkins
- Creating a Jenkins agent
- Setting up a pipeline job
- Utilizing SYNK and SonarQube for Static Application Security Testing (SAST)
- Employing Arachni and OWASP-ZAP for Dynamic Application Security Testing (DAST)
- Using Anchore and Aqua MicroScanner for container image security scanning
- Developing a comprehensive DevSecOps pipeline
- Enabling CI and CD processes
Automated Security Practices
- Automating security testing with Gauntlt
- Conducting automated security attacks
Automating Application Security
- Automating and refactoring Cross-Site Scripting (XSS) attacks
- Automating SQL Injection (SQLi) attacks
- Automating fuzz testing
- Integrating security testing into software delivery pipelines for government
Summary and Next Steps
Requirements
- An understanding of the DevOps process for government
Audience
- DevOps professionals in the public sector
14 Hours
Testimonials (2)
Craig was extremely involved in the training, always making sure we are paying attention, adapted the examples to our day-to-day activities and always provided an answer when asked, even if the information was not added in the presentation.
Ecaterina Ioana Nicoale - BOOKING HOLDINGS ROMANIA SRL
Course - DevOps Foundation®
High level of commitment and knowledge of the trainer
