GoHacking Secure Coding and DevSecOps
The course introduces fundamental concepts of secure development best practices and security automation within the process of building software and systems.
About the Course
The GoHacking AppSec, Secure Coding and DevSecOps (GHSCD) course introduces fundamental concepts of secure development best practices and security automation within a development process.
Every day, new flaws are discovered in various systems, whether a web or mobile application, custom software, or a third-party component being used by an application. For a long time—and still today—it is possible to come across web or mobile applications that were designed with weaknesses in their development process.
In this training, basic secure development techniques will be covered, where students will gain an understanding of application security vulnerabilities, including the OWASP Top 10 list, and will learn strategies to defend against them using proactive secure development controls.
Various topics will be covered, such as: Application Security, Secure Development Lifecycle (SDL), OWASP Top 10 and its various projects and tools, Application Security Testing such as DAST, SAST, and SCA, CI/CD, Secret Scanning, Container Image Scanning, DevOps, DevSecOps, and GitHub Actions, among others.
GHSCD prepares students for more advanced GoHacking courses such as Ethical Hacking Web Exploitation and Security (EHWEB) and Ethical Hacking Modern Web Exploitation (EHMWX).
Course Content
- 1.DevOps and DevSecOps
- 2.Application Security
- 3.Open Web Application Security Project (OWASP)
- 4.OWASP Top 10
- 5.OWASP Top 10 Proactive Controls
- 6.OWASP Top 10 CI/CD Security
- 7.Security Testing Methodologies (DAST, SAST, SCA)
- 8.SAST, DAST, and SCA in CI/CD
- 9.Secrets and Credentials
- 10.Container Security