Certified DevOps Security Practitioner (CDSP)

Certified DevOps Security Practitioner (CDSP)– 3 Days course contents

 Module 1:

•       Intro DevOps Culture

•       DevOps Principles

•       Overview of DevOps Tools

•       DevOps CI/CD Pipelining

•       Security & Compliance Challenges in DevOps

•       Regulation

•       Security Compliance

•       Cloud Service threats

•       Rapid releases

•       New Technology (Microservices)

Module 2:

•       Case Study

•       Shift Secure Left

•       OWASP Proactive Controls

•       Using Infrastructure as Code

•       The ‘HoneyMoon’ Effect

•       SDOMM or DSOMM(Maturity Model)

Module 4

·       Microservice Security

·       What is Docker?

·       Overview of Docker Components

·       Security Concerns with Containers

·       Attacking Docker Containers Misconfiguration(Hands-on)

·       Auditing Docker Containers(Hands-on)

·       Kubernetes Attacking and Defending

Module 5:

·       Security Automation

·       CaseStudy

·       Security Policy

·       Framework(BDD,Robot)

·       Introduction to ansible(Iaac)

·       Ansible overview

·       Hands-on Security Automation

Module 3

·       Security challenges in CI/CD

·       Case Study

·       Injecting Security into CI/CD

·       Hands-on Open Source Tools
(npm,owasp dependency checker,retire.js)any one

·       Static Analaysis

·       Hands-on Open Source Tools
(gitrob/trufflehog,open source static code scanner) any one

·       Dynamic Analaysis

·       Hands-on Open Source Tools (zap)

·       Security Testing

·       Git Attack & Best Pratice

·       Jenkins Attack & Best Pratice

Module 6:

·       Security Automation Compliance

·       Hands-on Inspec

·       Runtime Checks & Monitoring

·       Netflix - Security Monkey’s

Module 7:

·       WAF Intro

·       Case Study (Microservice)

·       Owasp Modsecurity

·       Intro to Cloud –DevSecOps (AWS, Azure)

·       Serverless Security