Course Outline

Day 01

Introduction

DevSecOps at a Glance

  • Continuous Integration (CI) and Continuous Delivery (CD)
  • Integrating security early in the DevOps process

DevSecOps Method Theories

  • Security for DevOps technologies
  • The timing and methods of incorporating security into the application development lifecycle
  • Shared responsibility for security practices and activities

Day 02

DevSecOps with Jenkins

  • Creating a Jenkins agent
  • Setting up a pipeline job
  • Using SYNK and SonarQube for Static Application Security Testing (SAST)
  • Using Arachni and OWASP-ZAP for Dynamic Application Security Testing (DAST)
  • Using Anchore and Aqua MicroScanner for container image security scanning
  • Building a DevSecOps pipeline
  • Implementing CI and CD processes

Security Automation

  • Automating security testing with Gauntlt
  • Conducting an automated attack simulation

Application Security Automation

  • Automating and refactoring Cross-Site Scripting (XSS) attacks
  • Automating SQL Injection (SQLi) attacks
  • Using a fuzzer for automated testing
  • Integrating security tests into software delivery pipelines

Summary and Next Steps

This curriculum is designed to enhance the skills of professionals working in DevSecOps roles, ensuring alignment with best practices and standards for government.

Requirements

  • An understanding of the DevOps process for government

Audience

  • DevOps professionals in the public sector
 14 Hours

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories