DevSecOps Foundation
Course Overview
Dive into the world of DevSecOps and learn how to integrate security practices into your DevOps pipeline with our comprehensive DevSecOps course. This program is designed to help you understand and implement security measures throughout the development lifecycle, ensuring robust and secure applications.
Format
- Duration: 2 days
- Format: In-person or Remote, Instructor-led training (ILT)
- Course Difficulty: Basic
- Experience Level: Intermediate
- Hands-on Labs: Cloud based
Prerequisites
- Basic knowledge of DevOps practices and tools
Course contents
Day 1: DevSecOps Fundamentals
Module 1: Understanding DevSecOps
- DevSecOps principles and practices
- Importance of integrating security into DevOps
- Key differences between DevOps and DevSecOps
- Case studies of successful DevSecOps implementations
Module 2: Cyber Threat Landscape (CTL)
- Overview of current cyber threats and vulnerabilities
- Tactics, techniques and procedures (TTPs) used by cybercriminals
- OWASP top 10 vulnerabilities
- Strategies for mitigating and responding to cyber threats
Module 3: Secure Software Supply Chain
- Understanding software supply chain security
- Tools for Software Composition Analysis (SCA)
- Implementing SCA in the DevOps pipeline
- CNCF best practices for securing the software supply chain
Module 4: Static Application Security Testing (SAST)
- Introduction to SAST
- Tools and techniques for SAST
- Integrating SAST into CI/CD pipelines
- Interactive discussion on implementing SAST in a CI/CD pipeline
Day 2: DevSecOps Tools and Techniques
Module 5: Container Images and Secure Deployment
- Container security fundamentals
- Securing container images
- Best practices for secure container deployment
- Scanning and monitoring container images for vulnerabilities
Module 6: Dynamic Application Security Testing (DAST)
- Introduction to DAST
- Tools and techniques for DAST
- Best practices for DAST
- Fighting cloud-native security complexity with DAST
Module 7: Infrastructure as Code (IaC) Security
- Security considerations in IaC
- Tools for securing IaC
- Interactive discussion on securing infrastructure using IaC tools
- Implementing IaC security in CI/CD pipelines
Module 8: Compliance and Governance
- Understanding security compliance requirements
- Implementing governance in DevSecOps
- Auditing and reporting in DevSecOps
- Cloud native compliance and governance best practices
Related Courses
Linux Fundamentals
The Linux Fundamentals course provides beginners with a comprehensive introduction to Linux operating systems. This course covers essential topics such as ...
VIEW MORE
DEVOPS FOUNDATION
DevOps is a set of practices that combines software development (Dev) and IT operations (Ops) to shorten the development lifecycle and deliver high-quality ...
VIEW MORE
DOCKER INTERMEDIATE
This in-depth course propels you beyond Docker basics, equipping you with the skills to optimize Docker for production-level ...
VIEW MORE
DOCKER ADVANCED
Unlock the full potential of Docker and bring your containerized deployments to the next level with this intensive, hands-on course. You'll gain a comprehensive ...
VIEW MORE
KUBERNETES KCNA
This comprehensive Kubernetes training prepares you to excel in the Kubernetes and Cloud Native Associate (KCNA) exam and managing containerized applications ...
VIEW MORE
Level up your skills and unlock your potential—contact us today to learn how to enroll and receive special volume discounts!