Training Session - Hands-On Security in DevOps (SecDevOps) Workshop Day 1 (2 Days)

No ratings

Presented at AppSecUSA 2016 by

Agile and DevOps have revolutionized the way we deliver apps to customers. Software products today demand rapid everything. Rapid Code Changes, Rapid Deployments and Rapid Delivery. In addition, you have embraced Agile Development Methodologies that stress on iterative product development and flexibility to changing environments. There is one major problem in this entire chain, and that is Application Security. While your product may be rapidly delivered to customers, Application security still remains a massive bottleneck in your continuous delivery pipeline. Application security is critical because companies lose billions of dollars due to vulnerabilities in their applications. Apart from typical vulnerabilities like SQL Injection and Cross Site Scripting, vulnerabilities in authentication, authorization, business logic and cryptographic implementations are more prevalent and can cause massive damage to a software product company. This is why you need SecDevOps. You need a practical, repeatable and scalable way to deliver Application Security to your product across the Agile and DevOps lifecycle. In the we45 Certified SecDevOps Professional program you will receive powerful hands on training on how you can implement scalable and effective security for rapid-release applications. The workshop will be a hardcore hands-on workshop with coverage on the following, but not limited to: Security Threat Modeling - Agile Methodology Static Application Security Testing - Integrated with Continuous Integration Services Customized Security Automation Scripting Framework with Continuous Integration Creating specialized Application Security Testing Scripts to be integrated with existing Test Suites Security in Configuration management and Continuous Deployment Creating Security Configuration Management “Infrastructure as Code” and Validation Scripts Application Security Monitoring in a DevOps World