Fundamentals Of Devsecops : Handson Included
Published 8/2023
MP4 | Video: h264, 1280x720 | Audio: AAC, 44.1 KHz
Language: English
| Duration: 8h 9m
Basics of DevSecOps
What you'll learn
Foundations Of Cloud
How to build & secure applications on cloud securely
Secure the cloud
How to Secure the Cloud
Requirements
Eagerness and interest to learn in cloud
Description
The Fundamentals of DevSecOps is designed to provide participants with a comprehensive understanding of the principles, practices, and tools involved in integrating security into the software development and operations lifecycle. This course aims to bridge the gap between development, operations, and security teams, enabling organizations to build and deploy secure software products efficiently.Throughout the course, participants will explore the fundamental concepts of DevSecOps and gain insights into its importance in modern software development. They will learn how to implement security measures at each stage of the software development lifecycle, ensuring that security is considered from the initial design to deployment and beyond.Target Audience: This course is suitable for software developers, system administrators, operations engineers, security professionals, and anyone involved in the software development and deployment lifecycle. It is beneficial for individuals and organizations aiming to integrate security practices into their DevOps processes and enhance the overall security posture of their software products.Prerequisites: While there are no strict prerequisites for this course, a basic understanding of software development, DevOps principles, and general security concepts would be beneficial.Learning: By the end of the DevSecOps Foundations course, participants will have gained the knowledge and skills necessary to effectively integrate security practices into their software development and operations processes. They will be equipped with the tools and techniques needed to build secure, resilient, and compliant software systems in today's dynamic and evolving threat landscape.
Overview
Section 1: Introduction
Lecture 1 Introduction
Lecture 2 About Instructor
Lecture 3 What is DevSecOps ?
Lecture 4 Linux OS
Section 2: Organization & Projects
Lecture 5 Introduction
Lecture 6 OWASP
Lecture 7 OWASP ZAP
Lecture 8 OWASP Top 10
Lecture 9 OWASP cheatsheet
Lecture 10 CIS benchmarks
Lecture 11 CIS controls
Lecture 12 CVEs
Lecture 13 CVSS
Lecture 14 CISA
Lecture 15 CWE
Section 3: Linux Fundamentals
Lecture 16 Linux Fundamentals
Lecture 17 File Ownership & Permissions
Lecture 18 CHMOD explanation , practical and demo
Lecture 19 CHOWN explanation , practical and demo
Lecture 20 PASSWD file explained
Lecture 21 SHADOW file explained
Lecture 22 GROUP file explained
Lecture 23 SUDO explained
Lecture 24 SUDO hands on and DEMO
Lecture 25 Privilege escalation
Lecture 26 apt-get & apt
Lecture 27 Automatic updates
Lecture 28 SSH
Lecture 29 SSH generate public private key pair and its usage
Lecture 30 SSH Advanced
Lecture 31 sshd_config explained
Lecture 32 commonly used commands
Lecture 33 CIS hardened image
Section 4: Docker
Lecture 34 Docker ? What is Docker? Why docker ?
Lecture 35 Docker Registries
Lecture 36 Dockerfile
Lecture 37 Basic docker commands
Lecture 38 Docker recommendation : Do's and Dont's
Lecture 39 Hands on Docker Basics And Security
Section 5: Terraform
Lecture 40 Terraform Introduction
Lecture 41 Terraform recommendations
Lecture 42 terraform Demo Pre-requisites
Lecture 43 Terraform Demo
Section 6: Jenkins
Lecture 44 Jenkins Intro
Lecture 45 Jenkins Architecture
Lecture 46 Jenkins recommendations
Lecture 47 Jenkins Demo : Installation using docker-compose.yml
Lecture 48 Jenkins Demo: Agent Setup
Lecture 49 Jenkins Demo : Agent Setup , setting up docker as jenkins agent
Lecture 50 Jenkins first job : freestyle
Section 7: Testing, Tooling and Principles
Lecture 51 Introduction
Lecture 52 SAST
Lecture 53 "Discover Code Vulnerabilities with Fortify SAST": Demo
Lecture 54 DAST
Lecture 55 DAST hands-on-demo
Lecture 56 SCA
Lecture 57 SCA hands-on-demo docker CLI
Lecture 58 SCA hands-on-demo UI
Lecture 59 penetration testing
Lecture 60 vulnerability assessment
Lecture 61 key security principles
Section 8: Pipelines
Lecture 62 YML explained
Lecture 63 github pipeline using yaml: hands-on-demo
Lecture 64 YAML Simple Blueprint of DevSecOps Pipeline
Lecture 65 YAML Finally DevSecOps Pipeline
Lecture 66 Final DevSecOps Success Pipeline
Section 9: Course Summary
Lecture 67 Summary of the Course
Cloud Professionals, Pen Test, Security, Cloud Security, DevSecOps, DevOps Professionals
Free search engine download: Udemy Fundamentals of DevSecOps HandsOn Included 2024
