Administreerimine Arvutiõpe, IT koolitus

DevSecOps

Hands-on training to automate security into a fast-paced DevOps environment using various open-source tools and scripts.

Kirjeldus

Modern enterprises are implementing the technical and cultural changes required to embrace DevOps methodology by introducing practices such Continuous Integration (CI), Continuous Delivery (CD), Continuous Monitoring (CM) and Infrastructure as Code (IaC). DevSecOps extends DevOps by introducing security in each of these practices giving a certain level of security assurance in the final product. In this training, we will demonstrate using our state-of-the-art DevSecOps Lab as to how to inject security in CI, CD, CM and IaC. This is a complete hands-on training with attendees requiring only a browser to complete the entire training. Attendees will receive the DevSecOps Lab built using Vagrant and Ansible comprising of various open-source tools and scripts to help the DevOps engineers in automating security within their CI/CD pipeline. The attendees will receive a DevSecOps-Lab VM (designed by the NotSoSecure team) containing all the code, scripts and tools that are used for building the entire DevSecOps pipeline.

Eesmärk

At the end of this course attendees will be able to: - Understand how to tackle security issues in a fast-moving DevOps environment - Identify tools/solutions and develop processes to create a secure by default infrastructure - Utilize the integration scripts and tools provided in the DevSecOps Lab to create your own DevSecOps pipeline

Sihtgrupp

DevOps engineers, security and solutions architects, system administrators will also strongly benefit from this course as it’ll give them a holistic approach towards application security.

Eeldused

Anybody with a background in IT or related to software development whether a developer or a manager can attend this course to get an insight about DevOps and DevSecOps.

Programm

Day 1
- Lab Setup
  - Online Lab Setup
  - Offline Lab Instructions
- Introduction to DevOps
  - What is DevOps?
    - Lab : DevOps Pipeline
- Introduction to DevSecOps
  - Challenges for Security in DevOps
  - DevOps Threat Model
  - DevSecOps – Why, What and How?
  - Vulnerability Management
- Continuous Integration
- Pre-Commit Hooks
  - Introduction to Talisman
    - Lab : Running Talisman
    - Lab : Create your own regexes for Talisman
- Secrets Management
  - Introduction to HashiCorp Vault
  - Demo : Vault Commands
- Continuous Delivery
  - Software Composition Analysis (SCA)
    - Introduction to Dependency-Check
      - Lab : Run Dependency-Check pipeline
      - Lab : Fix issues reported by Dependency-Check
  - Static Analysis Security Testing (SAST)
    - Introduction to Semgrep
      - Lab : Run Semgrep pipeline
      - Lab : Create your own Semgrep Rules
      - Lab : Fix Issues reported by Semgrep
  - Dynamic Analysis Security Testing (DAST)
    - Introduction to OWASP ZAP
    - Demo : Creating ZAP Context File
      - Lab : Run ZAP in pipeline
- Day 2
  - Infrastructure As Code
    - Vulnerability Assessment (VA)
      - Introduction to OpenVAS
      - Lab : Run OpenVAS pipeline
    - Container Security (CS)
      - Introduction to Trivy
      - Lab : Run Trivy in Pipeline
      - Lab : Improvise Docker base image
    - Compliance as Code (CaC)
      - Introduction to Inspec
      - Lab : Run Inspec in Pipeline
      - Lab : Improvise Docker compliancy controls
  - Continuous Monitoring
    - Logging
      - Introduction to the ELK Stack
      - Lab : View Logs in Kibana
    - Alerting
      - Introduction to ElastAlert and ModSecurity
      - Lab : View Alerts in Kibana
    - Monitoring
      - Lab : Create Attack Dashboards in Kibana
  - DevSecOps in AWS
    - DevOps on Cloud Native AWS
    - AWS Threat Landscape
    - DevSecOps in Cloud Native AWS
  - DevSecOps Challenges and Enablers
    - Challenges with DevSecOps
    - Building DevSecOps Culture
    - Security Champions
    - Case Studies
    - Where do we Begin?
    - DevSecOps Maturity Model

Lisainfo

The training is held in cooperation with our partner QA.

Investeering

Hind kokkuleppel

Küsi, millal toimub

Korraldaja

Nordic Koolitus

Vaata firma profiili

✨

Vajan seda oma tiimile

Aitame koostada päringu

›

See koolitus toimus viimati mais 2023. Me ei tea veel, kas ja millal see kordub — seepärast on ta siin alles. Küsi järele, kui see sind huvitab.

Sarnased koolitused, mis praegu toimuvad

Administreerimine

Integrated DevSecOps

DevSecOps is the integration of security practices and principles into the DevOps process, with the aim of creating a more secure software development lifecycle. In this 2-day workshop, we will cover tips and tricks on how to increase security of software delivery supply chains and existing infrastructure.

29.10 – 30.10 · Veebikoolitus · 16 ak. tundi

Andrey Adamovich

BCS Koolitus

899€+kmVaata

Administreerimine

Designing and Implementing Microsoft DevOps solutions (AZ-400T00-A)

This course provides the knowledge and skills to design and implement DevOps processes and practices.

14.12 – 17.12 · Aia 7 või videokonverentsi keskkonnas MS Teams · 32 ak. tundi

Gunnar Peipman

BCS Koolitus

1390€+kmVaata

Administreerimine

The Golden Path to Platform Engineering

Platform Engineering is critical in today’s tech landscape for enabling developer productivity, system resilience, and operational efficiency.

15.10 – 16.10 · Veebikoolitus · 16 ak. tundi

Andrey Adamovich

BCS Koolitus

899€+kmVaata

Administreerimine

Real-life Kubernetes

This course focuses on the most commonly used Kubernetes features as well as provides practical tutorials and real-life examples of deploying distributed applications, managing networking primitives (load balancers, proxies), setting up persistent data storage, dynamic configuration management, and many other exciting features built into the core of Kubernetes.

08.10 – 09.10 · Veebikoolitus · 16 ak. tundi

12.11 – 13.11 · Veebikoolitus · 16 ak. tundi

Andrey Adamovich

BCS Koolitus

899€+kmVaata

Teavita mind, kui see koolitus taas toimub

See koolitus hetkel ei toimu. Jäta oma kontakt ja anname teada, kui see või mõni sarnane koolitus taas kalendrisse lisandub.

✨

Otsid midagi muud?

Aitame leida sarnase koolituse või koostada tiimile eraldi pakkumise — vestle meiega.