Overview

DevSecOps in the DevOps cycle helps in building security right from scratch into the design, into the code and into the deployment stages. It helps to enhance the efficiency of software security. The aim of DevSecOps is to bridge the gap between security and agility. 

In this course, you will be introduced to concepts of DevSecOps through continuous delivery. Before diving deep into the concept, you need to understand the challenges and constraints in DevOps like speed, design, cloud and container. Next, you will learn ways to inject security in DevOps like Shift Security Left, OWASP Proactive Controls, Secure by Default, Making Security Self-Service, Using Infrastructure as Code and the Honeymoon effect. Later the course will explain how to secure code in DevOps deployment. You will understand the lifecycle of continuous delivery and continuous integration, which is a controlled framework. 

Explore ways how to secure design by performing a risk assessment and learning aspects of writing and reviewing a secure code. You will be able to perform the practical implementation of Dynamic Scanning (DAST), Fuzzing and Continuous Delivery, Security in Unit and Integration Testing, Automated Attacks, Pen Testing and Bug Bounties and Vulnerability Management. In the end, you will be able to explore various mechanisms for securing the infrastructure and the process of production. The last topic would cover compliance that needs to be followed while writing the codes.