Fundamentals Of Devsecops : Handson Included

Basics of DevSecOps

What you'll learn

Foundations Of Cloud

How to build & secure applications on cloud securely

Secure the cloud

How to Secure the Cloud

Requirements

Eagerness and interest to learn in cloud

Description

The Fundamentals of DevSecOps is designed to provide participants with a comprehensive understanding of the principles, practices, and tools involved in integrating security into the software development and operations lifecycle. This course aims to bridge the gap between development, operations, and security teams, enabling organizations to build and deploy secure software products efficiently.Throughout the course, participants will explore the fundamental concepts of DevSecOps and gain insights into its importance in modern software development. They will learn how to implement security measures at each stage of the software development lifecycle, ensuring that security is considered from the initial design to deployment and beyond.Target Audience: This course is suitable for software developers, system administrators, operations engineers, security professionals, and anyone involved in the software development and deployment lifecycle. It is beneficial for individuals and organizations aiming to integrate security practices into their DevOps processes and enhance the overall security posture of their software products.Prerequisites: While there are no strict prerequisites for this course, a basic understanding of software development, DevOps principles, and general security concepts would be beneficial.Learning: By the end of the DevSecOps Foundations course, participants will have gained the knowledge and skills necessary to effectively integrate security practices into their software development and operations processes. They will be equipped with the tools and techniques needed to build secure, resilient, and compliant software systems in today's dynamic and evolving threat landscape.

Overview

Section 1: Introduction

Lecture 1 Introduction

Lecture 2 About Instructor

Lecture 3 What is DevSecOps ?

Lecture 4 Linux OS

Section 2: Organization & Projects

Lecture 5 Introduction

Lecture 6 OWASP

Lecture 7 OWASP ZAP

Lecture 8 OWASP Top 10

Lecture 9 OWASP cheatsheet

Lecture 10 CIS benchmarks

Lecture 11 CIS controls

Lecture 12 CVEs

Lecture 13 CVSS

Lecture 14 CISA

Lecture 15 CWE

Section 3: Linux Fundamentals

Lecture 16 Linux Fundamentals

Lecture 17 File Ownership & Permissions

Lecture 18 CHMOD explanation , practical and demo

Lecture 19 CHOWN explanation , practical and demo

Lecture 20 PASSWD file explained

Lecture 21 SHADOW file explained

Lecture 22 GROUP file explained

Lecture 23 SUDO explained

Lecture 24 SUDO hands on and DEMO

Lecture 25 Privilege escalation

Lecture 26 apt-get & apt

Lecture 27 Automatic updates

Lecture 28 SSH

Lecture 29 SSH generate public private key pair and its usage

Lecture 30 SSH Advanced

Lecture 31 sshd_config explained

Lecture 32 commonly used commands

Lecture 33 CIS hardened image

Section 4: Docker

Lecture 34 Docker ? What is Docker? Why docker ?

Lecture 35 Docker Registries

Lecture 36 Dockerfile

Lecture 37 Basic docker commands

Lecture 38 Docker recommendation : Do's and Dont's

Lecture 39 Hands on Docker Basics And Security

Section 5: Terraform

Lecture 40 Terraform Introduction

Lecture 41 Terraform recommendations

Lecture 42 terraform Demo Pre-requisites

Lecture 43 Terraform Demo

Section 6: Jenkins

Lecture 44 Jenkins Intro

Lecture 45 Jenkins Architecture

Lecture 46 Jenkins recommendations

Lecture 47 Jenkins Demo : Installation using docker-compose.yml

Lecture 48 Jenkins Demo: Agent Setup

Lecture 49 Jenkins Demo : Agent Setup , setting up docker as jenkins agent

Lecture 50 Jenkins first job : freestyle

Section 7: Testing, Tooling and Principles

Lecture 51 Introduction

Lecture 52 SAST

Lecture 53 "Discover Code Vulnerabilities with Fortify SAST": Demo

Lecture 54 DAST

Lecture 55 DAST hands-on-demo

Lecture 56 SCA

Lecture 57 SCA hands-on-demo docker CLI

Lecture 58 SCA hands-on-demo UI

Lecture 59 penetration testing

Lecture 60 vulnerability assessment

Lecture 61 key security principles

Section 8: Pipelines

Lecture 62 YML explained

Lecture 63 github pipeline using yaml: hands-on-demo

Lecture 64 YAML Simple Blueprint of DevSecOps Pipeline

Lecture 65 YAML Finally DevSecOps Pipeline

Lecture 66 Final DevSecOps Success Pipeline

Section 9: Course Summary

Lecture 67 Summary of the Course

Cloud Professionals, Pen Test, Security, Cloud Security, DevSecOps, DevOps Professionals