IT HANA HANA A ME DEVOPS

Hoʻomaʻamaʻa ʻia ʻo DevSecOps ʻoihana ponoʻī

HOOLAHA	LOA	PRICE (Inc. GST)
palapala hōʻike	60-lā komo lab	$1,430

NA DEVSECOPS MAU MA KA HANA LUMIFY
ʻO DevSecOps Practical nā mea paionia DevSecOps. E aʻo i nā manaʻo DevSecOps, nā mea hana, a me nā ʻenehana mai ka poʻe loea ʻoihana, a e hoʻopaʻa i nā mākau honua maoli i nā labs pūnaewele hou. E hōʻike i kou akamai i nā hui ma o ka loaʻa ʻana o DevSecOps Certification, me ka ʻike e pili ana i ka hana ma mua o ke kumumanaʻo.
ʻO Lumify Work kahi hoa hoʻomaʻamaʻa kūhelu o Practical DevSecOps.

No ke aha e aʻo ai i kēia papa

Ua lohe mākou a pau e pili ana iā DevSecOps, Shifting Left, Rugged DevOps akā ʻaʻohe ex maopopo.amples a i ʻole frameworks i loaʻa i nā ʻoihana palekana e hoʻokō i kā lākou hui.
E aʻo pololei kēia papa lima iā ʻoe - nā mea hana a me nā ʻenehana e hoʻokomo i ka palekana ma ke ʻano o ka pipeline DevOps. E aʻo mākou pehea e mālama ai nā unicorns e like me Google, Facebook, Amazon, a me Etsy i ka palekana ma ka nui a me nā mea e hiki ai iā mākou ke aʻo mai iā lākou e hoʻomaʻamaʻa i kā mākou papahana palekana.
Ma ke aʻo ʻana ʻo DevSecOps Professional e aʻo ʻoe pehea e mālama ai i ka palekana ma ka pālākiō me ka hoʻohana ʻana i nā hana DevSecOps. E hoʻomaka mākou me nā kumu o DevOps a me DevSecOps, a laila neʻe i nā manaʻo holomua e like me Security as Code, Compliance as Code, Configuration Management, Infrastructure as Code, a me nā mea hou aku.

Hāʻawi kēia haʻawina holoʻokoʻa iā ʻoe me:
Loaʻa i ke ola a me ka manawa:

• Papa kuhikuhi
• Nā wikiō papa a me nā papa inoa
• He 30 mau minuke me nā kumu aʻo
• Loaʻa i kahi ala hoʻolaʻa hoʻolaʻa
• 30+ mau hana alakaʻi

Lab a me ka hōʻike:

• 60 lā o ka loaʻa ʻana o ka lab ma muli o ka polokalamu kele pūnaewele
• Hoʻokahi hoʻāʻo hoʻāʻo no ka Certified DevSecOps Professional (CDP) Certification

Nui koʻu kumu aʻo i hiki ke hoʻokomo i nā hiʻohiʻona i nā hanana honua maoli e pili ana i koʻu kūlana kikoʻī.
Ua hoʻokipa ʻia au mai koʻu hiki ʻana mai a me ka hiki ke noho pūʻulu ma waho o ka lumi papa e kūkākūkā i ko mākou kūlana a he waiwai nui kā mākou mau pahuhopu.
Ua aʻo nui au a manaʻo wau he mea nui ka hoʻokō ʻana o kaʻu mau pahuhopu ma ka hele ʻana i kēia papa.
Hana nui ka hui Lumify Work.

AMANDA NICOL
KOKUA IA MANA MANA - HEALT H WORLD LIMIT ED

KA MEA E A'O AI

• E hoʻokumu i kahi moʻomeheu o ke kaʻana like a me ka laulima ʻana ma waena o nā mea pili
• E hoʻonui i ka hoʻoikaika ʻana o ka hui palekana e hōʻemi i ka ʻili hoʻouka
• Hoʻopili i ka palekana ma ke ʻano o DevOps a me CI/CD
• E hoʻomaka a hoʻomāmā i kāu polokalamu palekana noi me ka hoʻohana ʻana i nā hana Secure SDLC hou
• Hoʻopaʻa i ka ʻōnaehana me ka hoʻohana ʻana i Infrastructure as Code a mālama i ka hoʻokō me ka hoʻohana ʻana i ka Compliance as Code nā mea hana a me nā ʻenehana
• Hoʻohui a hoʻohui pū i nā nāwaliwali e hoʻonui i ka hoʻopaʻapaʻa maikaʻi ʻole me ka hoʻohana ʻana i nā mea hana automated

Hoʻomaʻamaʻa ʻia ʻo Lumify Work Customized Training
Hiki iā mākou ke hāʻawi a hana i kēia papa aʻo no nā hui nui e mālama ana i kāu hui manawa, kālā a me nā kumuwaiwai.
No ka ʻike hou aku, e ʻoluʻolu e kelepona mai iā mākou ma 1 800 853 276.

NA KUMU HAAWINA

Hoʻokomo ʻia i ka DevOps a me DevSecOps

• He aha ka DevOps?
• Nā Papa Hoʻokumu DevOps - Nā kānaka, ka hana a me ka ʻenehana
• Nā Kuleana DevOps - Moʻomeheu, Automation, Ana a kaʻana like (CAMS)
• Nā pōmaikaʻi o DevOps - ka wikiwiki, ka hilinaʻi, ka loaʻa, ka Scalability, Automation, ke kumukūʻai a me ka ʻike.
• He aha ka Continuous Integration a me ka hoʻomau mau ʻana?
• Hoʻohui mau i ka hoʻouna mau ʻana i ka hoʻouna mau ʻana
• Hoʻouna hoʻomau vs Hoʻouna mau
• Kaʻina hana maʻamau o ka paipu CI/CD
• Hoʻolālā hoʻolālā ʻulaʻula/ ʻōmaʻomaʻo
• Loaʻa i ka automation piha
• Ke hoʻolālā ʻana i kahi paipu CI/CD no kahi web palapala noi
• ʻO nā pilikia maʻamau i ka wā e hoʻohana ai i ke kumu DevOps
• Nā noiʻi hihia ma DevOps o ka ʻenehana ʻokiʻoki ma Facebook, Amazon, a me Google
• Demo: He ʻoihana piha DevSecOps Pipeline

Int roduct ion i nā mea hana o ke kālepa

• Github/Gitlab/Bitbucket
• Docker
• Kakau inoa Docker
• Ansible
• Jenkins/Travis/Gitlab CI/Bitbucket
• Gauntlt
• Ua ʻōlelo ʻo Inspect
• Bandit / retireJS / Nmap
• Lima Lima: E hoʻohana i ka Vagrant e hoʻomaʻamaʻa i ka Infrastructure ma ke ʻano he Code
• Hana lima lima: Ke kūkulu nei i kahi CI Pipeline me ka hoʻohana ʻana iā Jenkins/Travis a me GitHub/Bitbucket
• Lima lima: E hoʻohana i nā mea hana ma luna e hana i kahi paipu CI/CD piha

Palekana SDLC a me CI/CD Pipeline

• He aha ka Secure SDLC?
• Hoʻopaʻa i nā hana SDLC a me nā puka palekana
• Koi Maluhia (Koi)
• Ka Hoʻohālike Hoʻohālike (Hoʻolālā)
• Nānā Kūikawā a Hoʻopaʻa ʻia e ka Default (Hoʻokō)
• ʻIkepili Dinamiki (Hoʻāʻo)
• OS paakiki, Web/Hoʻopaʻa paʻa palapala
• Ka Mākaʻikaʻi/Hoʻokō (Maintain)
• Ke Ana Hoʻohālikelike DevSecOps (DSOMM)
• Nā pae oʻo a me nā hana i pili
• 4 -axes ma DSOMM
• Pehea e hele ai mai ka Papa Māmā 1 a i ka Papa Kūʻokoʻa 4
• Nā hoʻomaʻamaʻa maikaʻi loa no ka Papa oʻo 1
• Nā noʻonoʻo no ka pae oʻo 2
• Nā Paʻakikī i ka Papa Oʻo 3
• ʻO ka moeʻuhane o ka loaʻa ʻana o ke kūlana makua 2
• Ke hoʻohana nei i nā mea hana o ke kālepa e hana i nā hana i luna ma CI / CD
• Hoʻopili i ka palekana ma ke ʻano o ka paipu CI/CD
• DevSecOps a me nā pilikia me ka Pentesting a me ka Vulnerability Assessment
• Hana lima: E hana i kahi paipu CI/CD kūpono no nā noi hou
• Lima lima: E hoʻokele i nā ʻike i loko o kahi pipeline automated piha

ʻIkepili Component (SCA) ma CI/CD Pipeline

• He aha ke ʻano o ka Pūnaehana Component Analysis?
• ʻIkepili Pūnaehana Pūnaewele a me kāna mau pilikia
• He aha ka mea e nānā ai ma kahi hoʻonā SCA (noa a pāʻoihana paha)
• Hoʻopili i nā mea hana SCA e like me OWASP Dependency Checker, Safety, RetireJs, a me NPM Audit, Snyk i loko o ka pipeline
• Demo: me ka hoʻohana ʻana iā OWASP Dependency Checker e nānā i nā nāwaliwali o ka ʻaoʻao ʻekolu i ka Java® Code Base
• Lima lima: me ka hoʻohana ʻana iā RetireJS a me NPM e nānā i nā nāwaliwali o ka ʻaoʻao ʻekolu i ka JavaScript Code Base
• Lima lima: e hoʻohana ana i ka palekana / pip e nānā i nā nāwaliwali o nā ʻaoʻao ʻekolu i ka Python Code Base

SAST (St at ic Analysis) ma CI/CD Pipeline

• He aha ka Static Application Security Testing?
• ʻIkepili Static a me kāna mau pilikia
• Hoʻokomo i nā mea hana SAST i loko o ka pipeline
• ʻO ka nānā ʻana i nā mea huna e pale i ka hōʻike huna ʻana i ke code
• Ke kākau ʻana i nā loiloi maʻamau e hopu i nā leaka huna i loko o kahi hui
• Lima lima: me ka hoʻohana ʻana iā SpotBugs e nānā i ke code Java
• Lima lima: e hoʻohana iā Trufflehog/Gitrob e nānā i nā mea huna i ka pipeline CI/CD
• Lima lima: me ka hoʻohana ʻana i ka brakeman/bandit e nānā iā Ruby on Rails a me Python Code Base

DAST (Dynamic Analysis) ma CI/CD Pipeline

• He aha ka Dynamic Application Security Testing?
• Dynamic Analysis a me kona mau pilikia (Session Management, AJAX Crawling)
• Hoʻopili i nā mea hana DAST e like me ZAP a me Burp Suite i loko o ka pipeline
• ʻO ka hoʻāʻo hewa ʻana o SSL
• ʻO ka hoʻāʻo hewa ʻana o ke kikowaena e like me nā waihona huna a files
• ʻO ka hoʻāʻo ʻana o Sqlmap no nā nāwaliwali o SQL Injection
• Lima lima: me ka hoʻohana ʻana iā ZAP e hoʻonohonoho i kēlā me kēia commit / wiki / mahina scans
• Demo: me ka hoʻohana ʻana i ka Burp Suite e hoʻonohonoho i kēlā me kēia commit / weekly/monthly scans

E like me ke Code and It s Security

• He aha ka Infrastructure as Code a me kona mau pono?
• Papahana + ʻO ka wehewehe ʻana i nā mea hana + hoʻokele hoʻonohonoho
• Introduction to Ansible
• Pono o Ansible
• Push a Pull ʻōnaehana hoʻonohonoho hoʻonohonoho hoʻonohonoho
• Nā modula, nā hana, nā kuleana, a me nā puke pāʻani
• Nā mea hana a me nā lawelawe e kōkua ana e hoʻokō iā IaaC
• Nā lima lima: Vagrant, Docker, a me Ansible
• Lima lima: Ke hoʻohana nei iā Ansible e hana i nā kiʻi gula a hoʻopaʻa i ka ʻoihana

Hoʻokō like Code

• ʻO nā ala like ʻole e mālama ai i nā koi hoʻokō ma DevOps scale
• Ke hoʻohana nei i ka hoʻokele hoʻonohonoho e hoʻokō i ka hoʻokō
• Mālama i ka hoʻokō me ka hoʻohana ʻana iā Inspec/OpenScap ma Scale
• Hana lima: E hana i kahi Inspec profile e hana i nā loiloi hoʻokō no kāu hui
• Hana lima: E hoʻohana iā Inspec profile e hoʻonui i ka hoʻokō

Hoʻoponopono i ka Vulnerability with h Cust om Tools

• ʻO nā ala e hoʻokele ai i nā nāwaliwali o ka hui
• Lima lima: Ke hoʻohana nei i ka Defect Dojo no ka hoʻokele vulnerability

NO wai ka papa?

Aia kāna papa i ka poʻe e ʻimi nei e hoʻokomo i ka palekana ma ke ʻano he ʻāpana agile/cloud/DevOps environments, e like me Security Professionals, Penetration Testers, IT Managers, Developers and DevOps Engineers.

NA KUMU

ʻAʻohe mea i koi ʻia e hana i kēia papa, akā e pōmaikaʻi nā haumāna mai ka loaʻa ʻana o ka ʻike kumu o nā kauoha Linux e like me ls, cd, mkdir, etc., a me nā hana palekana noi e like me OWASP Top 10.

Hoʻoponopono ʻia ka hoʻokō ʻana o kēia papa e Lumify Work e nā ʻōlelo a me nā kūlana. E ʻoluʻolu e heluhelu pono i nā ʻōlelo a me nā ʻōlelo ma mua o ke kau inoa ʻana i kēia papa e, no ka mea, ke kau inoa ʻia ma ka papa e pili ana i ka ʻae ʻana i kēia mau ʻōlelo.

https://www.lumifywork.com/en-au/courses/practical-devsecops-professional/Kāhea iā 1800 853 276 a kamaʻilio pū me kahi Luna Hoʻonaʻauao Lumify i kēia lā!
 training@lumifywork.com
 lumifywork.com
 facebook.com/LumifyWorkAU
 linkedin.com/company/lumify-work
 twitter.com/LumifyWorkAU
 youtube.com/@lumifywork

Palapala / Punawai

LUMIFY WORK Hoʻomaʻamaʻa Pono DevSecOps Professional [pdf] Ke alakaʻi hoʻohana Hoʻomaʻamaʻa ponoʻī ʻo DevSecOps Professional, Paced Practical DevSecOps Professional, Practical DevSecOps Professional, DevSecOps Professional, Professional

Nā kuhikuhi

• Palapala Hoʻohana