|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/application-security-with-fortify-on-demand/
课程评论：没有评论
课程名称：使用Fortify On Demand进行应用程序安全性 课程概述：应用程序安全测试（AST）的核心在于识别和修复软件应用中的漏洞，以确保应用在整个生命周期内的安全，从开发到部署及其后续维护。AST包括多种类型，如静态应用程序安全测试（SAST），它检查源代码；动态应用程序安全测试（DAST），则测试运行中的应用。可以将其视作软件的全面健康检查！OpenText™ Fortify™ On Demand（以下简称“FoD”）提供应用程序安全作为服务，客户将在基于云的平台上拥有自己的租户。FoD包含所有必要工具，使客户能够高效地简化其软件安全保证程序。FoD是实现DevSecOps最佳实践的助推器，支持安全开发及快速反馈。Opentext声称FoD是唯一提供SAST、SCA、DAST、IAST和MAST服务的应用安全供应商，能够高效地快速解决软件开发生命周期（SDLC）中的问题，并通过安全专家的深入评估提供支持。简而言之，FoD利用用户友好的集成生态系统，增强客户的软件供应链并支持可扩展的成熟度。 在本课程中，你将学习以下内容： 第一部分 - 理论 - 课程议程 - 术语 - 市场分析 - Fortify On Demand 概述及许可模式 第二部分 - 实践 - 申请FoD试用许可证 - FoD门户网站巡览 - 应用程序入驻及扫描设置 第三部分 - 集成 - Visual Studio IDE集成 - GitHub CI/CD管道集成 - FoD连接
Application security testing (AST) is all about identifying and fixing vulnerabilities in software applications. It ensures that apps are secure from various threats throughout their lifecycle, from development to deployment and beyond. There are several types of AST, like Static Application Security Testing (SAST) which examines the source code, and Dynamic Application Security Testing (DAST) which tests running applications. Think of it as a thorough health check-up for your software!OpenText™ Fortify™ On Demand (hereafter referred to as "FoD") offers application security (AppSec) as a service providing customers with their own cloud-based tenantFoD includes all essential tools that enable customers to streamline their Software Security Assurance Programs in a way that is effective and efficient at the same time.FoD is an enabler for DevSecOps best practices towards secure development and continuous feedback at DevOps speed Opentext claims that FoD is the only application security provider offering SAST, SCA, DAST, IAST, and MAST as services and is capable for rapidly resolve issues throughout the SDLC efficiently, supported by thorough assessments from security experts. In a nutshell, FoD utilizes a user-friendly integration ecosystem to fortify customers' software supply chain and support scalable maturity.In this course you will learn the following:Section I - Theoretical• Course Agenda• Terminology• Market Analysis• Fortify on demand Overview and Licensing modelSection II - Hands-On• Requesting FoD Trial License• FoD Portal Walk-through• Application On-boarding and Scan SetupSection III - Integrations• Visual Studio IDE Integration• GitHub CI/CD Pipeline Integration• FoD Connect
