Gudanar da HIDIMAR IT DA INGANTA

Kwararrun DevSecOps Mai Aikata Kai

HADA DA	TSORO	PRICE (ciki har da GST)
Baucan jarrabawa	60-day access lab	$1,430

KYAUTATA KYAUTA A AIKIN LUMIFY
Ayyukan DevSecOps sune majagaba na DevSecOps. Koyi dabarun DevSecOps, kayan aiki, da dabaru daga ƙwararrun masana'antu, da kuma ƙware dabarun fasaha na zamani a cikin dakunan gwaje-gwajen kan layi na zamani. Nuna ƙwarewar ku ga ƙungiyoyi ta hanyar samun Takaddun shaida na DevSecOps, tare da ilimin tushen ɗawainiya maimakon ka'ida.
Lumify Work Abokin Hulɗa ne na Horar da Ayyukan DevSecOps.

ME YA SA KARATUN WANNAN DARASIN

Dukanmu mun ji labarin DevSecOps, Canja Hagu, Rugged DevOps amma babu takamaiman tsohonamples ko tsarin da ke akwai don ƙwararrun tsaro don aiwatarwa a cikin ƙungiyarsu.
Wannan darasi na hannu zai koya muku daidai wannan - kayan aiki da dabaru don shigar da tsaro a matsayin wani ɓangare na bututun DevOps. Za mu koyi yadda unicorns kamar Google, Facebook, Amazon, da Etsy ke kula da tsaro a sikelin da abin da za mu iya koya daga gare su don balaga da shirye-shiryen tsaro.
A cikin horarwar ƙwararrun DevSecOps za ku koyi yadda ake ɗaukar tsaro a sikelin ta amfani da ayyukan DevSecOps. Za mu fara tare da tushen abubuwan DevOps da DevSecOps, sannan mu matsa zuwa manyan dabaru kamar Tsaro kamar Lambobi, Yarda da Lambobi, Gudanar da Kanfigareshan, Kayan aiki azaman Code, da ƙari.

Wannan kwas na kai-da-kai zai samar muku da:
Samun damar shiga:

• Littafin koyarwa
• Bidiyo na darasi da jerin abubuwan dubawa
• Zaman mintuna 30 tare da malamai
• Samun dama ga tasha mai sadaukarwa
• motsa jiki 30+ jagora

Lab da jarrabawa:

• Kwanaki 60 na damar yin amfani da kayan bincike na tushen burauza
• Ƙoƙarin gwaji ɗaya don Takaddar DevSecOps Professional (CDP) Certified

Malamina ya kasance mai girma iya sanya al'amuran cikin al'amuran duniya na gaske waɗanda suka shafi takamaiman halin da nake ciki.
An yi mini maraba daga lokacin da na zo da ikon zama a matsayin rukuni a wajen aji don tattauna yanayinmu kuma burinmu yana da matukar amfani.
Na koyi abubuwa da yawa kuma na ji yana da mahimmanci cewa an cimma burina ta halartar wannan kwas.
Babban aikin Lumify Work team.

AMANDA NICOL
Yana Taimakawa Manajan Ayyuka - HEALT H DUNIYA LIMIT ED

ABIN DA ZAKU KOYA

• Ƙirƙirar al'adar rabawa da haɗin gwiwa tsakanin masu ruwa da tsaki
• Ƙoƙarin ma'aunin jami'an tsaro na rage harin
• Haɗa tsaro azaman ɓangare na DevOps da CI/CD
• Fara ko haɓaka shirin tsaro na aikace-aikacenku ta amfani da ayyukan Secure SDLC na zamani
• Ƙarfafa abubuwan more rayuwa ta amfani da Kayan Aiki azaman Code kuma kiyaye yarda ta amfani da Yarjejeniya azaman kayan aikin Code da dabaru
• Ƙirƙira da haɗa haɗin kai ga rashin ƙarfi don ƙididdige ƙididdiga ta gaskiya ta amfani da kayan aikin sarrafa kansa

Lumify Work Special Training
Hakanan zamu iya isar da kuma keɓance wannan kwas ɗin horo don manyan ƙungiyoyin ceton lokacin ƙungiyar ku, kuɗi da albarkatun ku.
Don ƙarin bayani, tuntuɓi mu akan 1 800 853 276.

DARASIN SAUKI

Int roduct ion zuwa DevOps da DevSecOps

• Menene DevOps?
• Tubalan Ginin DevOps - Mutane, Tsari da Fasaha
• Ka'idodin DevOps - Al'adu, Aiki Aiki, Aunawa da Raba (CAMS)
• Fa'idodin DevOps - Sauri, Dogara, Samfura, Ƙarfafawa, Aiki da Kai, Kuɗi da Ganuwa
• Menene Ci gaba da Haɗuwa da Ci gaba da Aikawa?
• Ci gaba da Haɗuwa zuwa Ci gaba da Aiki zuwa Ci gaba da Bayarwa
• Ci gaba da Isarwa vs Ci gaba da Aikewa
• Gabaɗaya aikin bututun CI/CD
• Dabarar tura shuɗi/Green
• Samun cikakken aiki da kai
• Zayyana bututun CI/CD don a web aikace-aikace
• Kalubalen gama gari da ake fuskanta lokacin amfani da ƙa'idar DevOps
• Nazarin shari'a akan DevOps na fasaha mai yanke hukunci a Facebook, Amazon, da Google
• Demo: Cikakken bututun DevSecOps na kamfani

Int roduct ion zuwa Kayan aikin Kasuwanci

• Github/Gitlab/Bitbucket
• Docker
• Docker Registry
• Mai yiwuwa
• Jenkins/Travis/Gitlab CI/Bitbucket
• Gauntlt
• Dubawa
• Bandit / ritayaJS/Nmap
• Lab ɗin Hannun Hannu: Yi amfani da Vagrant don aiwatar da Kayan Aiki azaman Lambobi
• Hannun Lab: Gina bututun CI ta amfani da Jenkins/Travis da GitHub/Bitbucket
• Hannun Lab: Yi amfani da kayan aikin da ke sama don ƙirƙirar cikakken bututun CI/CD

Amintaccen SDLC da bututun CI/CD

• Menene Amintaccen SDLC?
• Amintaccen Ayyukan SDLC da Ƙofar Tsaro
• Bukatun Tsaro (Bukatun)
• T-hreat Modeling (Zane)
• Binciken Tsayayye da Amintacce ta Default (Aiwatarwa)
• Nazari mai ƙarfi (Gwaji)
• OS Hardening, Web/Aikace-aikacen Hardening (Aikewa)
• Kulawar Tsaro/Biyayya (Kiyaye)
• DevSecOps Maturity Model (DSMM)
• Matakan balaga da ayyukan da ke ciki
• 4 - gatari a cikin DSMM
• Yadda ake tafiya daga Matsayin Balaguro na 1 zuwa Maturity Level 4
• Mafi kyawun ayyuka don Matsayin Balaga na 1
• Abubuwan la'akari don Matsayin Balaga na 2
• Kalubale a Matsayin Balaga na 3
• Mafarkin Cimma Maturity Level 2
• Yin amfani da kayan aikin kasuwanci don yin ayyukan da ke sama a cikin CI/CD
• Saka Tsaro a matsayin wani ɓangare na bututun CI/CD
• DevSecOps da ƙalubalen tare da ƙima da ƙima
• Hannun Lab: Ƙirƙiri bututun CI/CD wanda ya dace da aikace-aikacen zamani
• Hannun Lab: Sarrafa binciken a cikin bututun mai sarrafa kansa

Sof t ware Ƙwararren Ƙwararru (SCA) a cikin bututun CI/CD

• Menene Binciken Abubuwan Abubuwan Software?
• Binciken Bangaren Software da ƙalubalen sa
• Abin da ake nema a cikin maganin SCA (kyauta ko kasuwanci)
• Haɗa kayan aikin SCA kamar OWASP Dependency Checker, Safety, RetireJs, da NPM Audit, Snyk a cikin bututun mai.
• Demo : ta amfani da OWASP Dependency Checker don duba raunin ɓangarori na ɓangare na uku a cikin Tushen Code na Java®
• Lab Lab ɗin Hannu: ta amfani da RetireJS da NPM don bincika raunin ɓangarori na ɓangare na uku a cikin Tushen Code na JavaScript.
• Hannun Lab: ta amfani da Tsaro/pip don bincika raunin ɓangarori na ɓangare na uku a cikin Tushen Code na Python

SAST (St at ic Analysis) a cikin bututun CI/CD

• Menene Gwajin Tsaron Aikace-aikacen Static?
• Nazari a tsaye da ƙalubalen sa
• Saka kayan aikin SAST a cikin bututun
• Binciken sirri don hana fallasa asirin a cikin lambar
• Rubutun bincike na al'ada don kama leken asiri a cikin ƙungiya
• Hannun Lab: yin amfani da SpotBugs don bincika lambar Java
• Hannun Lab: Yin amfani da Trufflehog/Gitrob don bincika sirrin bututun CI/CD
• Hannun Lab: ta amfani da birkiman/bandit don duba Ruby akan Rails da Tushen Code na Python

DAST (Tsarin Tattaunawa) a cikin bututun CI/CD

• Menene Gwajin Tsaro na Aikace-aikacen Dynamic?
• Nazari mai ƙarfi da ƙalubalen sa (Gudanar da Zama, Crawling AJAX)
• Haɗa kayan aikin DAST kamar ZAP da Burp Suite cikin bututun mai
• Gwajin kuskuren SSL
• Gwajin kuskuren uwar garken kamar manyan fayilolin sirri da files
• Gwajin Sqlmap don raunin allurar SQL
• Hannun Lab: Yin amfani da ZAP don saita kowane ƙaddamarwa / sati / kowane wata
• Demo : ta amfani da Burp Suite don saita kowane ƙaddamarwa / sati / kowane wata

Inf rast ruct ure as Code and It s Security

• Menene Infrastructure a matsayin Code da fa'idojinsa?
• Platform + Ma'anar Kayan Aiki + Gudanar da Kanfigareshan
• Gabatarwa ga Mai yiwuwa
• Fa'idodin Mai yiwuwa
• Tsarukan gudanarwa na tushen tsarin turawa da ja
• Modules, ayyuka, matsayi, da Littattafan Playbook
• Kayan aiki da Sabis waɗanda ke taimakawa cimma IaaC
• Lab ɗin Hannun Hannu: Baƙi, Docker, da Mai yiwuwa
• Hannun Lab: Yin Amfani da Mai yiwuwa don ƙirƙirar hotuna na Zinariya da taurare kayan aikin

Yarda a matsayin Code

• Hanyoyi daban-daban don aiwatar da buƙatun yarda a sikelin DevOps
• Amfani da tsarin gudanarwa don cimma daidaito
• Sarrafa yarda ta amfani da Inspec/OpenScap a Scale
• Hannun Lab: Ƙirƙiri Inspec profile don ƙirƙira cak don ƙungiyar ku
• Hannun Lab: Yi amfani da Inspec profile don auna yarda

Gudanar da Rashin lahani tare da Kayan aikin Cust om

• Hanyoyi don sarrafa raunin da ke cikin ƙungiyar
• Hannun Lab: Amfani da Defect Dojo don sarrafa rauni

WANE DARASIN GA WAYE?

T tafarkinsa yana nufin duk wanda ke neman shigar da tsaro a matsayin wani yanki na agile / Cloud / DevOps muhalli, kamar su Ma'aikatan Tsaro, Masu Gwajin Shiga, Manajan IT, Masu Haɓakawa da Injiniyoyi na DevOps.

SHARI'A

Babu buƙatun da ake buƙata don gudanar da wannan kwas, duk da haka ɗalibai za su amfana da samun ilimin asali na umarnin Linux kamar ls, cd, mkdir, da sauransu, da ayyukan tsaro na aikace-aikacen kamar OWASP Top 10.

Haɓakar wannan kwasa-kwasan ta Lumify Work ana gudanar da shi ta hanyar sharuɗɗa da sharuɗɗan yin rajista. Da fatan za a karanta sharuɗɗan da sharuɗɗan a hankali kafin yin rajista a cikin wannan kwas ɗin e, saboda rajista a cikin kwasa-kwasan e yana da sharuɗɗan yarda da waɗannan sharuɗɗan e.

https://www.lumifywork.com/en-au/courses/practical-devsecops-professional/Kira 1800 853 276 kuma yi magana da mai ba da shawara na Lumify Aiki a yau!
 training@lumifywork.com
 lufywork.com
 facebook.com/LumifyWorkAU
 linkedin.com/company/lumify-work
 twitter.com/LumifyWorkAU
 youtube.com/@lumifywork

Takardu / Albarkatu

KYAUTA AIKIN ƙwararren DevSecOps Mai Haɓakawa [pdf] Jagorar mai amfani Ƙwararriyar DevSecOps Mai Haɓakawa, Ƙwararrun Ƙwararru na DevSecOps, Ƙwararriyar DevSecOps, Ƙwararriyar DevSecOps, Ƙwararru

Magana

• Manual mai amfani