When will I receive my Course Certificate?

If you complete the course successfully, your electronic Course Certificate will be added to your Accomplishments page - from there, you can print your Course Certificate or add it to your LinkedIn profile.

Why can’t I audit this course?

This course is currently available only to learners who have paid or received financial aid, when available.

Is financial aid available?

Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.

Securing Your DevOps Pipelines

Securing Your DevOps Pipelines

位教师：Pearson

包含在 Coursera Plus 中

了解更多

1个模块

深入了解一个主题并学习基础知识。

中级等级

推荐体验

7 小时完成

灵活的计划

自行安排学习进度

1个模块

深入了解一个主题并学习基础知识。

中级等级

推荐体验

7 小时完成

灵活的计划

自行安排学习进度

您将学到什么

Build a DevSecOps pipeline in CircleCI with several industry standard tools
Deploy a TypeScript full-stack app and see how DevSecOps reports security risks
Learn how to get your organization onboard with a security and DevOps mindset
Perform simple automated security audits to further check for vulnerabilities

您将获得的技能

要了解的详细信息

可分享的证书

添加到您的领英档案

了解顶级公司的员工如何掌握热门技能

了解关于 Coursera for Business 的更多信息

Petrobras, TATA, Danone, Capgemini, P&G 和 L'Oreal 的徽标

该课程共有1个模块

Security is the top concern of businesses today. This course shows developers how to mitigate security risks by implementing DevSecOps best practices. Every organization with a DevOps framework should be looking to shift toward a DevSecOps mindset, bringing individuals of all abilities and across all technology disciplines to a higher level of proficiency in security. From testing for potential security exploits to building business-driven security services, a DevSecOps framework that uses DevSecOps tools ensures security is built into applications rather than being bolted on haphazardly afterwards.

In this course, Milecia McGregor covers how DevSecOps improves upon regular DevOps pipelines. She covers the tools and methodologies you can use to bring DevSecOps to your organization. By the end of the course, you will know how to build a DevSecOps pipeline and how to integrate different tools to handle the OWASP Top Ten, as well as compliance checks to stay up to date with regulations like HIPAA, PCI, and GDPR.

This module introduces DevOps and its evolution into DevSecOps, emphasizing the importance of integrating security into development pipelines. Learners explore key security risks, the OWASP Top 10, and how DevSecOps mitigates vulnerabilities. The course covers essential security testing types and tools, guides students through building a secure pipeline with CircleCI, and concludes with advanced security practices like penetration testing and compliance audits. By the end, participants gain practical skills to implement and secure DevOps pipelines, preparing them to enhance application security in real-world environments.

涵盖的内容

33个视频6个作业

33个视频总计243分钟

Introduction2分钟
Learning objectives0分钟
Understand where DevOps came from6分钟
Learn how DevOps works9分钟
DevOps versus Waterfall10分钟
Learning objectives0分钟
Show where security comes in6分钟
Learn how issues get to production6分钟
Learn the OWASP 10 top security risks11分钟
Understand how attackers gain unauthorized access to apps5分钟
Learn the basics of DevSecOps5分钟
Use DevSecOps to mitigate risks5分钟
Learning objectives0分钟
Learn about SAST8分钟
Use SAST tools11分钟
Learn about DAST10分钟
Use DAST tools12分钟
Learn about IAST9分钟
Use IAST tools12分钟
Learn about OAST10分钟
Use OAST tools13分钟
Learning objectives0分钟
Set up the project4分钟
Set up CircleCI4分钟
Write the CircleCI config10分钟
Break down the pipeline steps10分钟
Add security to each step11分钟
Learning objectives0分钟
Learn how pen-testing works5分钟
Use Kali Linux tools10分钟
Use bug bounties5分钟
Perform compliance audits15分钟
Securing Your DevOps Pipelines: Summary2分钟

6个作业总计180分钟

Background on DevOps Quiz30分钟
Security in DevOps or DevSecOps Quiz30分钟
DevSecOps Tools Quiz30分钟
Setting up a DevSecOps Pipeline Quiz30分钟
Final Security Checks Quiz30分钟
End of Course Assessment30分钟

位教师

Pearson

268 门课程9,454 名学生

提供方

Pearson

从 Security 浏览更多内容

状态：免费试用
IBM
Application Security for Developers and DevOps Professionals
课程
Coursera Project Network
Jenkins Pipeline: Declarative and IaC approaches for DevOps
指导项目
状态：预览
Board Infinity
Introduction to DevSecOps
课程
状态：预览
Johns Hopkins University
Introduction to DevSecOps
课程

人们为什么选择 Coursera 来帮助自己实现职业发展

Felipe M.

自 2018开始学习的学生

''能够按照自己的速度和节奏学习课程是一次很棒的经历。只要符合自己的时间表和心情，我就可以学习。'

Jennifer J.

自 2020开始学习的学生

''我直接将从课程中学到的概念和技能应用到一个令人兴奋的新工作项目中。'

Larry W.

自 2021开始学习的学生

''如果我的大学不提供我需要的主题课程，Coursera 便是最好的去处之一。'

Chaitanya A.

''学习不仅仅是在工作中做的更好：它远不止于此。Coursera 让我无限制地学习。'

通过 Coursera Plus 开启新生涯

无限制访问 10,000+ 世界一流的课程、实践项目和就业就绪证书课程 - 所有这些都包含在您的订阅中

了解更多

通过在线学位推动您的职业生涯

获取世界一流大学的学位 - 100% 在线

探索学位

加入超过 3400 家选择 Coursera for Business 的全球公司

提升员工的技能，使其在数字经济中脱颖而出

了解更多

常见问题

Yes, you can preview the first video and view the syllabus before you enroll. You must purchase the course to access content not included in the preview.

If you decide to enroll in the course before the session start date, you will have access to all of the lecture videos and readings for the course. You’ll be able to submit assignments once the session starts.

Once you enroll and your session begins, you will have access to all videos and other resources, including reading items and the course discussion forum. You’ll be able to view and submit practice assessments, and complete required graded assignments to earn a grade and a Course Certificate.