Learn about DevSecOps and web application security in this comprehensive course for beginners. Explore common web vulnerabilities, their fixes, and how to use DevSecOps tools to secure applications and containers. Discover the differences between DevOps and DevSecOps, understand the software project iceberg, and grasp the importance of integrating security into the development process. Practice exploiting vulnerabilities, then learn to find and fix them using Snyk Code and the Snyk Web Interface. Gain insights into securing containers with expert guidance from Eric Smalling, a Senior Developer Advocate at Snyk.io. By the end of this 1-2 hour course, acquire practical skills to implement DevSecOps principles and enhance the security of your web applications.
Overview
Syllabus
Introduction.
What is DevSecOps?.
Vulnerabilities.
DevOps vs DevSecOps.
Software Project Iceberg.
Importance of DevSecOps.
Exploiting Common Web App Vulnerabilities.
Finding and Fixing Vulnerabilities with Snyk Code.
Exploring Vulnerabilities Using the Snyk Web Interface.
Securing Containers (featuring Eric Smalling).
Conclusion.
Taught by
freeCodeCamp.org
Related Courses
-
DevSecOps Fundamentals
-
Using Snyk to Find & Fix Vulnerabilities
-
Exploiting AI-Generated Code Vulnerabilities and Their Solutions
-
Hands-on Introduction to Snyk - Security Scanning for Dependencies, Code, and Containers
-
Stranger Danger - Your Java Attack Surface Just Got Bigger
-
Making DevSecOps Happen with Containers - Security Concerns and Solutions
Reviews
4.0 rating, based on 2 Class Central reviews
-
Great learning environment class central serves the best, the instructor led classes and self paced learning are all well structured with the best learning tools and available resources for advanced carrier learners, application vulnerabilities is been covered and a simple illustrations followed by the syllabus
-
Mohammed Osama UsmaniIt would be more great if there are more hands-on practical and some advance website SQL injection and more about BURP suite and advanced security stuff.
