About this Event
This training provides an overview of key application security automation principles and hands-on experience with creating an Application Security Pipeline using the OWASP Flagship project, DefectDojo. Over the course of two days, students will cover the crucial aspects of where and when to add automation to their application security program and gain experience with integrating APIs, setting up continuous testing, ChatOps integration using Slack, and automating security scanning with Docker/Kubernetes. This course covers consolidating and de-duplicating security issues, automating submission of issues to defect trackers like JIRA and generating reports/metrics in an automated fashion. Students will leave with a firm understanding of how to apply DevSecOps and Agile concepts to optimize their application security programs.
These hands-on labs consist of a series of exercises which build upon each other to construct an AppSec Pipeline specifically geared towards continuous testing. After discussing and walking through each fundamental aspect of the pipeline, the student will be provided with a lab to construct that portion themselves. These labs will provide working examples of all the key concepts needed to add automation to an AppSec program. Upon completion, students will be empowered to take the knowledge they’ve gained and apply security automation principals to their own org’s unique challenges.. The class exclusively utilizes open source tools including OWASP AppSec Pipeline OWASP DefectDojo, and other OWASP security assessment tools to ensure that licensing and cost won’t constrain your program.
Event Venue & Nearby Stays
Norris Conference Centers - Austin, 2525 West Anderson Lane, Austin, United States
USD 550.00