DevOps Security: Creating a DevOps Security Strategy

• DevOps experience.
• Basic knowledge or interest in security.

Audience

• Devops engineers
• Security engineers

DevOps is a software development approach that aligns application development with IT operations. Some of the tools that have emerged to support DevOps include: automation tools, containerization and orchestration platforms. Security has not kept up with these developments.

In this instructor-led, live course, participants will learn how to formulate the proper security strategy to face the DevOps security challenge.

Format of the course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

Introduction

• How DevOps creates more security risk for organizations
  • The price of agility, speed and de-centralized control

Inadequacies of Traditional Security Tools

• Security policies
• Firewall rules
• Lack of APIs for integration
• Lack of visualization tools

Implementing a DevOps-Ready Security Program

Aligning Security with Business Goals

Removing the Security Bottleneck

Implementing Detailed Visibility

Standardizing Security Configurations

Adding Sensors into the Application

• Interactive Application Security Testing
• Runtime Application Self-Protection

Providing Security Data to DevOps Tools through RESTful APIs

On-Demand Scaling, Micro-Perimeterization of Security Controls

Per-Resource Granular Security Policies

Automating Attacks against Pre-Production Code

Continually Testing the Production Environment

Protecting Web Applications from an Agile/DevOps Perspective

Securing Containers and Clouds

Embracing Next Generation Automated Security Tools

The Future of DevOps and Its Strategic Role in Security

Summary and Conclusion