Course Outline

Day 01

Introduction

An Overview of DevSecOps

  • Continuous Integration (CI) and Continuous Delivery (CD)
  • Incorporating security early in the development process, the DevOps approach

Theories and Methods of DevSecOps

  • Security integration with DevOps technologies
  • Timing and methods for incorporating security into application and development lifecycle
  • Shared responsibility for security tasks and activities

Day 02

Implementing DevSecOps with Jenkins

  • Creating a Jenkins agent
  • Setting up a pipeline job
  • Utilizing SYNK and SonarQube for Static Application Security Testing (SAST)
  • Employing Arachni and OWASP-ZAP for Dynamic Application Security Testing (DAST)
  • Using Anchore and Aqua MicroScanner for container image security scanning
  • Developing a comprehensive DevSecOps pipeline
  • Enabling CI and CD processes

Automated Security Practices

  • Automating security testing with Gauntlt
  • Conducting automated security attacks

Automating Application Security

  • Automating and refactoring Cross-Site Scripting (XSS) attacks
  • Automating SQL Injection (SQLi) attacks
  • Automating fuzz testing
  • Integrating security testing into software delivery pipelines for government

Summary and Next Steps

Requirements

  • An understanding of the DevOps process for government

Audience

  • DevOps professionals in the public sector
 14 Hours

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories