Performing DevSecOps Automated Security Testing

By Peter Mosmans
This course will show you how to perform automated security testing. It will demonstrate how to use security testing tools in an continuous integration pipeline.
Play course overview
Course info
Level
Intermediate
Updated
Jul 28, 2020
Duration
2h 39m
Table of contents
Course Overview
Course Overview 2m
Initializing the Setup for Automated Security Testing
Automating Code Security Testing 4m Demo: Setting-up a Build Pipeline For Automated Security Testing 8m Demo: Setting-up the Demo Lab 14m Describing the Demo Lab 5m Introduction to Performing DevSecOps Automated Security Testing 6m Module Summary 1m
Automating Code Security Testing
Demo: Analyzing Code during Automated Builds Using SonarQube 6m Demo: Detecting Existing Secrets in Code 5m Demo: Detecting New Secrets during Automated Security Testing 6m Demo: Installing a Code Quality Metrics System 6m Demo: Linting a Dockerfile 5m Demo: Preventing Secrets from Being Committed 6m Detecting Secrets in Code 3m Introduction 2m Linting Code 4m Module Summary 1m Using Code Quality Systems 3m Workflow and Conclusion of Code Quality Metrics Systems 3m Workflow and Conclusion of Detecting Secrets 3m Workflow and Conclusion of Using Linters 2m
Automating Third Party Libraries Security Testing
Demo: Using OWASP Dependency Check from the Command Line 4m Demo: Using OWASP Dependency Check in a Pipeline 4m Introduction 1m Third Party Libraries Scanners 6m Workflow, Conclusion, and Summary 3m
Automating Container Security Testing
Container Security Scanning 4m Demo: Implementing Container Security Testing in a Pipeline 6m Demo: Performing Container Security Testing on the Command Line 7m Introduction 2m Workflow, Conclusion and Summary 4m
Automating Infrastructure Security Testing
Demo: Implementing OWASP ZAP and All Automated Security Tests 6m Demo: Running Nikto and Using the Sidecar Testing Pattern 8m Infrastructure Scanning 6m Introduction 2m Module and Course Summary 3m Workflow and Conclusion of Infrastructure Scanning 2m
Description
Course info
Level
Intermediate
Updated
Jul 28, 2020
Duration
2h 39m
Description

Security testing is a vital part of any organization. In this course, Performing DevSecOps Automated Security Testing, you will gain the ability to perform automated security tests. First, you will learn how to implement automated security scanning of code. Then, you will perform security testing of containers. Finally, you will explore how to perform automated security tests of applications and infrastructure. When you are finished with this course, you will have the skills and knowledge of performing automated security tests needed to implement in a continuous integration environment.

About the author
Peter Mosmans
About the author

Peter started out in the nineties as software engineer working on internet banking applications for various European financial institutions. Since 2004, he started specializing in pentesting complex and feature-rich web applications. Currently, he leads a global team of highly skilled and enthusiastic penetration testers as lead pentester.

More from the author
Approaching Automated Security Testing in DevSecOps
Intermediate
47m
Dec 2, 2019
Secure Coding: Using Components with Known Vulnerabilities
Intermediate
1h 13m
Feb 22, 2019
More courses by Peter Mosmans
Section Introduction Transcripts
Section Introduction Transcripts

Course Overview
Hi, everyone. My name is Peter Mosmans, and welcome to my course, Performing DevSecOps Automated Security Testing. I'm a former software developer and now a lead penetration tester and DevSecOps consultant, working for multiple companies around the globe. Are you ready to start performing DevSecOps security testing? Could your pipeline use some more security tests? Would you like to see demos of security testing tools in action? Well, then this course is for you. You'll learn all about performing automated security testing. Some of the major topics that we will cover include how to perform automated security tests, how to integrate numerous security testing tools into your existing build pipelines, how to detect secrets within your code base, existing ones, as well as new ones. By the end of this course, you will know all about performing security testing, and you will be ready to implement and integrate security tests into your build pipeline. Before beginning the course, you should be a little bit familiar with software development lifecycles. Knowledge of Docker is a pre, but overall discourses for anyone interested in automated security testing. I hope you'll join me on this journey to learn about performing automated security testing with the Performing DevSecOps Automated Security Testing course here, at Pluralsight.

You're the smartest person in the room

PROVE IT

Your team won't just close the skills gap

THEY'LL HURDLE IT