LUMIFY ỌRỤ Ọkachamara DevSecOps bara uru nke onwe

Ozi ngwaahịa

• Aha ngwaahịa: Bara Uru DevSecOps Ọkachamara ji onwe ya
• Nsonye: Mpempe akwụkwọ ule
• Ogologo: Nweta ụlọ nyocha ụbọchị 60
• Ọnụ ego (gụnyere GST): $2

Banyere Practical DevSecOps

Practical DevSecOps bụ usoro ịsụ ụzọ na-akuziri DevSecOps echiche, ngwaọrụ na usoro sitere n'aka ndị ọkachamara ụlọ ọrụ. Ọ na-enye ọzụzụ nka nke ụwa n'ezie site na ụlọ nyocha ịntanetị ọgbara ọhụrụ. Site n'inweta Asambodo DevSecOps, ị nwere ike igosipụta nka gị nye ndị otu. Ọrụ Lumify bụ Onye Mmekọ Ọzụzụ Ndị Ọrụ nke DevSecOps bara uru.

Gịnị mere e ji amụ ihe ọmụmụ a?

Emebere ọzụzụ ọkachamara DevSecOps a dị elu iji nyere ndị ọkachamara nchekwa aka ijide nchekwa n'ogo site na iji omume DevSecOps. Usoro ahụ na-ekpuchi ihe ndị bụ isi nke DevOps na DevSecOps, yana echiche dị elu dị ka ihe atụ egwu egwu dị ka koodu, RASP / IAST, Nchekwa akpa, Njikwa nzuzo, na ndị ọzọ.

Usoro nkuzi nke onwe na-enye ihe ndị a:

• Akwụkwọ ntuziaka ị nweta oge ndụ
• Ihe nkuzi vidiyo na ndepụta ndenye
• Oge nkeji iri atọ ya na ndị nkuzi
• Ịnweta ọwa Slack raara onwe ya nye
• Ihe omume 30+ eduzi
• Ụlọ nyocha na ule: Ụbọchị 60 nke ịnweta ụlọ nyocha dabere na ihe nchọgharị
• Otu nwale ule maka asambodo DevSecOps ọkachamara (CDE).

Ihe Ị Ga-amụta

• Mepụta omenala nke ikere òkè na imekọ ihe ọnụ n'etiti ndị na-eme ihe
• Mgbalị otu nchekwa ọnụ ọgụgụ iji belata elu ọgụ
• Tinye nchekwa dị ka akụkụ nke DevOps na CI/CD
• Malite ma ọ bụ tozuo mmemme nchekwa ngwa gị site na iji omume Secure SDLC ọgbara ọhụrụ
• Mee ka akụrụngwa sie ike site na iji akụrụngwa dị ka koodu ma jikwaa nrube isi site na iji nnabata dị ka ngwa koodu na usoro
• Kwakọba ma jikọta adịghị ike na nyocha nke adịgboroja site na iji ngwaọrụ akpaaka

Ntuziaka ojiji ngwaahịa

Iji mee nke ọma n'ụzọ Ọkachamara Practical DevSecOps, soro ntuziaka ndị a:

Nzọụkwụ 1: Ịnweta ihe ọmụmụ ihe

1. Gbaa mbọ hụ na ị nwere njikọ ịntanetị kwụsiri ike.
2. Gaa na nkuzi websaịtị na https://www.lumifywork.com/en-au/courses/practical-devsecops-expert/.
3. Banye na akaụntụ gị site na iji nzere enyere.
4. Nweta akwụkwọ ntuziaka, vidiyo, na ndepụta ndenye maka ndụ gị niile

Nzọụkwụ 2: Mmekọrịta na ndị nkuzi

Dịka akụkụ nke usoro ọmụmụ, ị nwere ohere ịhazi nnọkọ nkeji 30 na ndị nkuzi. Soro usoro ndị a:

1. Soro ọwa Slack raara onwe ya nye enyere.
2. Jikọọ ndị nkuzi ka ịhazi oge nnọkọ gị.
3. N'oge nnọkọ, jụọ ajụjụ, chọọ nkọwa, na

Nzọụkwụ 3: Mezue mmega ahụ eduzi

Usoro a gụnyere ihe omume 30+ eduzi iji mee ka mmụta gị sikwuo ike. Soro usoro ndị a:

1. Nweta gburugburu ụlọ nyocha dabere na ihe nchọgharị site na iji nzere enyere.
2. Soro ntuziaka enyere maka mmega ahụ ọ bụla.
3. Mepụta echiche, ngwa ọrụ, na usoro na gburugburu ebe emepụtara n'ezie.

Nzọụkwụ 4: Inweta ule

Mgbe ịmechara mmega ahụ eduzi wee nwee ntụkwasị obi na ihe ọmụma gị, ị nwere ike ịnwale asambodo DevSecOps ọkachamara (CDE) asambodo. Nke a bụ ihe ị kwesịrị ịma:

1. A na-eme ule ahụ n'ịntanetị.
2. Ị nwere ụbọchị 60 nke ohere ụlọ nyocha iji kwado maka ule ahụ.
3. Banye na portal ule site na iji nzere enyere.
4. Soro ntuziaka ka mezue ule n'ime oge enyere.
5. Mgbe ịgafe ule ahụ, a ga-enye gị Asambodo DevSecOps ọkachamara (CDE).

NTỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWỤKWASỊAKWỤKWỤKWỤKWỤKWASỊRỊ

DevSecOps bara uru bụ ndị ọsụ ụzọ DevSecOps. Mụta echiche DevSecOps, ngwa ọrụ, na usoro sitere n'aka ndị ọkachamara ụlọ ọrụ, ma mụta nkà ụwa n'ezie na ụlọ nyocha ọnlaịnụ nke ọgbara ọhụrụ. Gosipụta nka gị nye otu dị iche iche site n'inweta Asambodo DevSecOps, jiri ihe ọmụma dabere na ọrụ kama ịbụ tiori. Ọrụ Lumify bụ Onye Mmekọ Ọzụzụ Ndị Ọrụ nke DevSecOps bara uru.

GỊNỊ mere ị ga-eji mụọ ihe ọmụmụ a

Anyị niile anụla banyere DevSecOps, Shifting Left, na Rugged DevOps mana ọ nweghị ihe doro anya.amples ma ọ bụ frameworks dị maka ndị ọkachamara nchekwa iji mejuputa na nzukọ ha.
Usoro aka ya ga-akụziri gị kpọmkwem nke ahụ - ngwaọrụ na usoro iji tinye nchekwa dịka akụkụ nke pipeline DevOps. Anyị ga-amụta ka unicorns dị ka Google, Facebook, Amazon, na Etsy si ejikwa nchekwa n'ogo yana ihe anyị nwere ike ịmụta n'aka ha iji tozuo mmemme nchekwa anyị. N'ọzụzụ ọkachamara DevSecOps anyị dị elu, ị ga-amụta otu esi edozi nchekwa n'ogo site na iji omume DevSecOps. Anyị ga-amalite site na isi nke DevOps na DevSecOps, wee gaa n'ihu n'echiche dị elu dị ka Modeling iyi egwu dị ka Koodu, RASP/IAST, Nchekwa akpa, Njikwa nzuzo, na ndị ọzọ. Usoro nkuzi nke onwe ga-enye gị:

Ịnweta oge ndụ

• Akwụkwọ ntuziaka
• Ihe nkuzi vidiyo na ndepụta ndenye
• Oge nkeji 30 yana nkuzi h
• Ịnweta ọwa Slack raara onwe ya nye
• Ihe omume 30+ eduzi

Ụlọ nyocha na ule:

• Ụbọchị 60 nke ịnweta ụlọ nyocha dabere na ihe nchọgharị
• Otu nwale ule maka asambodo DevSecOps ọkachamara (CDE).

IHE Ị GA-AMỤTA

• Mepụta ọdịbendị nke ịkekọrịta na imekọ ihe ọnụ n'etiti ndị na-eme ihe
• Gbanwee mbọ ndị otu nchekwa na-eme iji belata elu ọgụ
• Tinye nchekwa dị ka akụkụ nke DevOps na CI/CD
• Malite ma ọ bụ tozuo mmemme nchekwa ngwa gị site na iji omume Secure SDLC ọgbara ọhụrụ
• Mee ka akụrụngwa sie ike site na iji akụrụngwa dị ka koodu ma jikwaa nrube isi site na iji nnabata dị ka ngwa koodu na usoro
• Kwakọba ma jikọta adịghị ike na nyocha nke adịgboroja site na iji ngwaọrụ akpaaka

Onye nkuzi m nwere nnukwu ike itinye ọnọdụ n'ime ọnọdụ ụwa n'ezie metụtara ọnọdụ m. A nabatara m site na mgbe m rutere na ikike ịnọdụ ala dị ka otu n'èzí klaasị iji kparịta ọnọdụ anyị na ebumnuche anyị bara ezigbo uru. Amụtara m ọtụtụ ihe ma chee na ọ dị mkpa na e mezuru ebumnuche m site na ịga ọmụmụ ihe a. Nnukwu ọrụ Lumify Work otu.

AMANDA NICOL

Ọ na-akwado ọrụ njikwa - HEALT H World LIMITED

Isiokwu ọmụmụ

gafereview nke DevSecOps

• Ihe mgbochi ụlọ DevOps - Ndị mmadụ, usoro na teknụzụ
• Ụkpụrụ DevOps - Omenala, akpaaka, nha na nkekọrịta (CAMS)
• Uru nke DevOps - Ọsọ, Ntụkwasị Obi, Nnweta, Scalability, Automation, Cost and Vision
• gafereview nke DevSecOps ngwá ọrụ dị egwu
• Ngwa njikwa nchekwa
• Ngwa mgbakwunye na-aga n'ihu na ntinye aka na-aga n'ihu
• Akụrụngwa dị ka koodu (IaC) ngwaọrụ
• Ngwa nkwukọrịta na nkekọrịta
• Nchekwa dị ka koodu (SaC) ngwaọrụ
• gafereview nke SDLC echekwara na CI/CD
• Review nke ọrụ nchekwa na SDLC echekwara
• Ntinye aka na-aga n'ihu na ntinye aka na-aga n'ihu
• Otu esi esi na DevSecOps Maturity Model (DSSOM) Ọkwa 2 gaa n'ọkwa 4
• Omume kacha mma na ntụle maka ọkwa ntozu 3
• Omume kacha mma na ntụle maka ọkwa ntozu 4
• Nchekwa akpaaka na oke ya
• DSMM ọkwa 3 na ọkwa 4 aka mgba na ngwọta

Lumify ọrụ

Ọzụzụ ahaziri ahazi Anyị nwekwara ike ịnye ma hazie usoro ọzụzụ a maka ndị otu buru ibu na-echekwa oge, ego na akụrụngwa gị. Maka ozi ndị ọzọ, biko kpọtụrụ anyị na 1 800 853 276.

Nchekwa y Requirement s and Threat Modeling (TM)

• Gịnị bụ Nlereanya Egwu?
• ST RIDE vs DREAD nso
• Nlereanya egwu na ihe ịma aka ya
• Ngwa ụdị ihe iyi egwu oge gboo yana otu ha dabara na pipeline CI/CD
• Ụlọ nyocha aka-aka: Megharịa ihe nchekwa chọrọ dị ka koodu
• Aka-na Lab: iji ThreatSpec ime Nlegharị anya egwu dị ka koodu
• Aka-na Lab: iji nchekwa BDD hazie egwu

St Advanced St na ic Analysis (SAST) na CI/CD Pipeline

• Kedu ihe kpatara nko ndị na-ebu ụzọ mee adịghị mma na DevSecOps
• Ide iwu omenala iji kpochapụ ihe ndị na-adịghị mma ma melite ogo nsonaazụ ya
• Ụzọ dị iche iche iji dee iwu omenala na ngwaọrụ efu na akwụ ụgwọ
• Okwu oge niile
• Osisi Syntax Abstract
• Eserese (Ntụle usoro data na njikwa)
• Ụlọ nyocha aka-aka: Na-ede ndenye ego omenala na bandit maka ngwa ụlọ ọrụ gị

Advanced Dynamic Analysis (DAST) na CI/CD Pipeline

• Ịtinye ngwaọrụ DAST n'ime pipeline
• Ijikwa QA/Arụmọrụ akpaaka iji chụba nyocha DAST
• Iji Swagger (OpenAPI) na ZAP nyochaa API ugboro ugboro. Ụzọ iji jikwaa nyocha omenala maka ZAP Scanner
• Iji asụsụ Zest iji nye mkpuchi ka mma maka nyocha DAST
• Aka-na Lab: iji ZAP, Selenium, na Zest hazie nyocha dị omimi.
• Aka-na Lab: iji Burp Suite Pro hazie kwa nyocha kwa izu / kwa ọnwa / kwa ọnwa

Mara: Ụmụ akwụkwọ kwesịrị iweta ikikere Burp Suite Pro ka ha jiri na CI/CD

Nyocha oge ọsọ (RASP/IAST) na CI/CD Pipeline

• Kedu ihe bụ nyocha nchekwa ngwa Runtime Analysis?
• Ọdịiche dị n'etiti RASP na IAST
• Nyocha oge na ihe ịma aka
• RASP/IAST na adabara ya na pipeline CI/CD
• Aka-na ụlọ nyocha: Mmejuputa azụmahịa nke ngwa IAST

Akụrụngwa ure dị ka koodu (IaC) na nchekwa ya

• Nchekwa nhazi nhazi (nwere ike ime).
• Ndị ọrụ / ihe ùgwù / igodo - Vault nwere ike ime vs Tower
• Ihe ịma aka na Vault nwere ike ime na pipeline CI/CD
• Okwu mmalite nke Packer
• Uru nke Packer
• Ụdị, ndị na-ewu ụlọ, ndị na-enye ihe, na ndị na-arụ ọrụ post-processors
• Packer maka nchekwa na-aga n'ihu na pipeline DevOps
• Ngwa na ọrụ maka ime IaaC (Packer, Pable, and Docker)
• Aka-na Lab: Iji ike eme ka ike na-prem/igwe ojii maka PCI DSS
• Ụlọ nyocha aka-aka: Mepụta onyonyo ọla edo siri ike site na iji Packer na ihe nwere ike ime

Nchekwa akpa (Docker).

• Kedu ihe bụ Docker?
• Docker vs Vagrant
• Ihe ndabere nke Docker na ihe ịma aka ya
• Ọdịmma dị na onyonyo (Ọhaneze na nkeonwe)
• Ịgọnarị mbuso agha ọrụ
• Ụzọ mbute ihe ùgwù na Docker
• Nhazi ezighi ezi nchekwa
• Nchekwa akpa
• Nyochaa ntụkwasị obi ọdịnaya na iguzosi ike n'ezi ihe
• Ikike na oghere aha na Docker
• Na-ekewa netwọkụ
• Kernel Hardening site na iji SecComp na AppArmor
• Ntụle static nke onyonyo akpa (Docker).
• Nyocha dị omimi nke ndị ọbịa akpa na daemons
• Ụlọ nyocha aka-aka: Na-enyocha onyonyo docker site na iji Clair na API ya
• Aka-na Lab: Auditing Docker daemon na onye ọbịa maka okwu nchekwa

Njikwa nzuzo na ngbanwe akụrụngwa akụrụngwa na-agbanwe agbanwe

• Ijikwa ihe nzuzo na akụrụngwa ọdịnala
• Ijikwa ihe nzuzo na arịa na Scale
• Njikwa nzuzo na igwe ojii
• Sistemụ njikwa ụdị na ihe nzuzo
• Ngbanwe gburugburu na nhazi files
• Docker, Sistemụ na-enweghị ike ịgbanwe na ihe ịma aka nchekwa ya
• Njikwa nzuzo na Hashicorp Vault na Consul
• Aka-na Lab: Chekwaa igodo nzuzo na nzuzo ndị ọzọ site na iji Vault/Consul

Njikwa adịghị ike dị elu

• Ụzọ iji jikwaa adịghị ike na nzukọ a
• Echiche ụgha na
• Ihe Ọjọọ Ụgha
• Omenala na njikwa adịghị ike
• Ịmepụta metrik dị iche iche maka CXO, devs na ndị otu nchekwa aka-na ụlọ nyocha: Iji Defect Dojo maka njikwa adịghị ike.

ONYE BỤ AKWỤKWỌ KWESỊRỊ?
Ebumnuche a bụ maka onye ọ bụla na-achọ itinye nchekwa dị ka akụkụ nke agile / Cloud / DevOps gburugburu, dị ka ndị ọkachamara nchekwa, ndị na-enyocha ntinye, ndị njikwa IT, ndị mmepe na ndị injinia DevOps.

PREREQUISITES

Ndị sonyere na nkuzi ga-enwerịrị asambodo DevSecOps Professional (CDP) asambodo. Ha kwesịkwara inwe nghọta bụ isi nke omume nchekwa ngwa dị ka SAST, DAST, wdg.

A na-achịkwa inye ihe ọmụmụ a site na Lumify Work site na usoro ntinye akwụkwọ na ọnọdụ. Biko gụọ usoro na usoro nke ọma tupu ị debanye aha na nkuzi a, n'ihi na ịdebanye aha na nkuzi e bụ ụkpụrụ na ịnakwere usoro na usoro ndị a.

https://www.lumifywork.com/en-au/courses/practical-devsecops-expert/

• training@lumifywork.com
• lumifywork.com
• facebook.com/LumifyWorkAU
• linkedin.com/company/lumify-work
• twitter.com/LumifyWorkAU
• youtube.com/@lumifywork

Akwụkwọ / akụrụngwa

ỌRỤ KWESỊRỊ ỌRỤ Ọkachamara DevSecOps bara uru [pdf] Ntuziaka onye ọrụ Ọkachamara DevSecOps Bara Uru, Ọkachamara DevSecOps Bara Uru, Ọkachamara DevSecOps, Ọkachamara DevSecOps, Ọkachamara

Ntụaka

• Akwụkwọ ntuziaka onye ọrụ