|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/devsecops-foundation-course/
课程评论：没有评论
**Coursera 课程：DevSecOps 入门：理解基础** 本课程旨在帮助学员掌握 DevSecOps 的基本概念和实践，以应对当今企业应用开发和交付中的安全挑战。 **课程亮点：** * **认识 DevSecOps 的重要性：** 了解在快速迭代的开发环境中，将安全融入 DevOps 流程的必要性，以及其对企业声誉和客户信任的影响。 * **DevOps 基础回顾：** 学习传统的开发与安全模式，理解 DevOps 的核心理念，以及如何将安全思维有效地融入 DevOps。 * **DevSecOps 核心知识：** 深入学习 DevSecOps 的定义、优势、面临的挑战以及其在现代软件开发生命周期中的关键作用。 * **实践 DevSecOps：** * **左移安全（Shift Left Security）：** 理解如何在早期阶段就将安全考虑纳入开发流程。 * **DevOps 与云计算的协同：** 探索 DevSecOps 在云环境中的应用。 * **安全测试工具：** 学习静态应用安全测试 (SAST) 和动态应用安全测试 (DAST) 的概念及常用工具，并掌握选择合适工具的技巧。 * **DevSecOps 安全控制：** 了解如何在计划、开发、代码提交、构建、测试、生产和运营等各个阶段实施安全控制。 * **参考资料：** GIOWASP 安全编码实践指南和 OWASP 关于 DevOps 管道安全的指导。 **课程目标：** 通过本课程，学员将： * 获得整合安全测试、评审到软件开发和部署生命周期的能力。 * 掌握在 DevOps 环境中实施安全测试、持续集成和持续交付的技能。 * 能够应用 DevSecOps 的概念和最佳实践来保护应用程序和基础设施。 * 理解如何满足行业标准和法规要求，构建和维护安全可靠的软件系统。 * 为在 DevSecOps 领域的职业发展奠定坚实基础。 本课程理论结合实际，通过真实案例和动手练习，帮助学员成为具备现代安全意识的开发和运维专业人士。
In today's Business Era, bad news or breach news spreads in seconds and can have immense impact on the customer and company's Reputation. For any organization involved in application development and delivery, Giving security a same importance with development and operations is a must. Every developer and network administrator considers security while creating and deploying applications when DevSecOps and DevOps are merged.Security is a major concern in the DevOps world. There is a constant push for companies to move more quickly, and security teams struggle to keep up with testing. This has led to the rise of a new field: DevSecOps. DevSecOps refers to the seamless integration of security testing, review throughout the software development and deployment lifecycle.Our DevSecOps Foundation Course covers key topics such as threat modeling, secure coding practices, , incident response, and compliance. You will learn how to implement security testing, continuous integration, and continuous delivery in a DevOps environment. This course is designed to help you develop the skills and knowledge needed to secure your applications and infrastructure in a fast-paced and constantly changing digital landscape. With the help of real-world examples and hands-on exercises, you will be able to apply the concepts and best practices of DevSecOps to your own projects. By the end of this course, you will be equipped with the knowledge and skills needed to secure your applications and infrastructure using the latest DevSecOps tools and methodologies and a solid understanding of how to integrate security into the software development process, which will help you to build and maintain secure software systems that meet industry standards and regulations, and help you to advance your career in the field of DevSecOps.DevOps Basics - In this section you will learn about following topicsTraditional Development & Security WorkingWhat is DevOpsHow to Fit in Security in DevOps WorldLearn DevSecOps Foundation - In this section you will learn about following topicsIntroduction to DevSecOpsBenefits of DevSecOpsChallenges of DevSecOpsWhy is DevSecOps ImportantBegin your DevSecOps Journey - In this section you will learn about following topicsUnderstanding Shift Left Security ApproachWhat is Common in DevOps and CloudWhat is SAST and common toolsWhat is DAST and common toolsTips for Choosing Right toolsDevSecOps controls - In this section you will learn about following topicsDevSecOps Security ControlsSecurity in Plan and Develop PhaseSecurity in Code commitSecurity in Build and Test PhaseSecurity in Production and Operate phaseReference materials about DevSecOps- In this section you will learn about following topicsOWASP - Secure Coding PracticesGuidance on DevOps pipeline security by OWASP
