Application Security in DevSecOps
1h 37mIntermediate2025-01-27
Authors
Tim Chase
Director of Application Security and Architecture at Nielsen
Course details
With DevOps continuing to grow in prominence, modern businesses expect applications to be built with greater speed and efficiency than ever before. Even so, the importance of application security cannot be downplayed for the sake of a pressing deadline. In this course, learn how to build a continuous application security process that meshes with the faster-paced world of DevOps. Instructor Tim Chase describes DevSecOps and its impact on application security. He then explores tools and strategies for testing apps in an automated fashion, explaining how key tools can integrate with the DevOps workflow.
Learning objectives
Analyze the different components of an application security program within a DevSecOps context.
Evaluate how application security practices can be integrated into a DevSecOps pipeline.
Design a comprehensive DevSecOps pipeline that incorporates application security tools and processes.
Apply automated testing strategies to enhance application security within a fast-paced development environment.
Synthesize DevOps practices with security principles to create a continuous application security process.
Learning objectives
Analyze the different components of an application security program within a DevSecOps context.
Evaluate how application security practices can be integrated into a DevSecOps pipeline.
Design a comprehensive DevSecOps pipeline that incorporates application security tools and processes.
Apply automated testing strategies to enhance application security within a fast-paced development environment.
Synthesize DevOps practices with security principles to create a continuous application security process.
Skills covered
Application SecurityDevOps FoundationsDevOpsCybersecurityOne-Off
Concepts
0. Introduction
- 01 - Introduction to application security in DevSecOps
- 02 - What you should know
1. DevSecOps Basics
- 03 - What is DevSecOps
- 04 - How is application security different
- 05 - The key to DevSecOps is continuous
- 06 - What is a DevOps pipeline
2. Continuous Application Security
- 07 - Continuous static scanning
- 08 - Continuous dynamic scanning
- 09 - Interactive application security scanning
- 10 - Continuous secret scanning
- 11 - Continuous dependency scanning
- 12 - Continuous container security
- 13 - Continuous infrastructure as code scanning
- 14 - AI application security
- 15 - Continuous application runtime monitoring
3. Practicing Continuous Application Security
- 16 - Tying it all together
- 17 - Managing the results
- 18 - Metrics
- 19 - Challenge - Building a continuous AppSec toolkit
- 20 - Solution - Building a continuous AppSec toolkit
Conclusion
- 21 - Next steps