{"id":31279,"date":"2022-09-17T03:24:31","date_gmt":"2022-09-17T03:24:31","guid":{"rendered":"https:\/\/www.devopsschool.com\/blog\/?p=31279"},"modified":"2022-12-23T05:47:18","modified_gmt":"2022-12-23T05:47:18","slug":"devsecops-certified-professional-dsocp-curriculum","status":"publish","type":"post","link":"https:\/\/www.devopsschool.com\/blog\/devsecops-certified-professional-dsocp-curriculum\/","title":{"rendered":"DevSecOps Certified Professional (DSOCP) Curriculum"},"content":{"rendered":"\n
#<\/th>SDLC Problems<\/th>Solution<\/th><\/tr><\/thead>
1<\/td> SDLC Models & Architecture with Agile, DevOps, SRE & DevSecOps, SOA & Micro services<\/td> Concept<\/td><\/tr>
2<\/td> Platform – Operating Systems<\/td>Centos\/Ubuntu & VirtualBox & Vagrant<\/td><\/tr>
3<\/td> Platform – Cloud<\/td> AWS<\/td><\/tr>
4<\/td> Platform – Containers<\/td>Docker<\/td><\/tr>
5<\/td> Planning and Designing<\/td> Jira & Confulence<\/td><\/tr>
6<\/td> Backend Programming Language<\/td> App Dev with Python\/Flask with mysql DB<\/td><\/tr>
7<\/td> Source Code Versioning<\/td> Git using Github<\/td><\/tr>
8<\/td> Code Analysis & Securing Code (SAST)<\/td> SonarQube & Coverity Scan & Snyk<\/td><\/tr>
9<\/td> Build Management<\/td> Maven and Gradle<\/td><\/tr>
10<\/td> Package Management<\/td> Packer & Artifactory<\/td><\/tr>
11<\/td> Unit Testing & Acceptance Testing & Coverage<\/td> Junit & Selenium & Jacoco & Jmeter<\/td><\/tr>
12<\/td> Configuration & Deployment Management<\/td> Ansible<\/td><\/tr>
13<\/td> Container Orchestration <\/td> Kubernetes & Helm Introduction<\/td><\/tr>
14<\/td> Infrastructure Coding<\/td> Terraform<\/td><\/tr>
15<\/td> Continuous Integration<\/td> Jenkins<\/td><\/tr>
16<\/td> Infrastructure Monitoring Tool<\/td> Datadog<\/td><\/tr>
17<\/td> Log Monitoring Tool<\/td> Splunk<\/td><\/tr>
18<\/td> Application Performance Monitoring<\/td> NewRelic<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
#<\/th>Security Problems<\/th>Solution<\/th><\/tr><\/thead>
18<\/td> Threat Model & Tools<\/td> STRIDE \/ PASTA \/ VAST & Microsoft Threat Modeling Tool \/ OWASP Threat Dragon<\/td><\/tr>
19<\/td> Dynamic Application Security Testing (DAST)<\/td> OWASP ZAP (Zed Attack Proxy) \/ Skipfish \/ Nmap \/ OpenVAS by Greenbone \/ Fortify WebInspect<\/td><\/tr>
20<\/td> Software Composition Analysis (SCA)<\/td> OWASP Dependency Check \/ Jfrog Xray<\/td><\/tr>
21<\/td> Runtime application self-protection & Containers (RASP)<\/td> Falco \/ Notary \/ The Update Framework (TUF) \/ Nikto<\/td><\/tr>
22<\/td> Web Application Firewall (WAF)<\/td> AWS WAF \/ Azure Web Application Firewall \/ Cloudflare Web Application Firewall (WAF)<\/td><\/tr>
23<\/td> Securing Credentials<\/td> HashiCorp Vault & AWS Secrets Manager, Azure key vault, AWS KMS, Kubernetes Secrets<\/td><\/tr>
24<\/td> Policy-based control for cloud native environments<\/td> Open Policy Agent (OPA)<\/td><\/tr>
25<\/td> Cloud Security service & Practices<\/td> Cloud Security with AWS & Azure service<\/td><\/tr>
26<\/td>Security Information and Event Management SIEM<\/td> Splunk SIEM<\/td><\/tr>
<\/td><\/td><\/td><\/tr><\/tbody><\/table><\/figure>\n","protected":false},"excerpt":{"rendered":"

# SDLC Problems Solution 1 SDLC Models & Architecture with Agile, DevOps, SRE & DevSecOps, SOA & Micro services Concept 2 Platform – Operating Systems Centos\/Ubuntu & VirtualBox & Vagrant… <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_joinchat":[],"footnotes":""},"categories":[2],"tags":[],"class_list":["post-31279","post","type-post","status-publish","format-standard","hentry","category-uncategorised"],"_links":{"self":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/31279","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/comments?post=31279"}],"version-history":[{"count":2,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/31279\/revisions"}],"predecessor-version":[{"id":31281,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/31279\/revisions\/31281"}],"wp:attachment":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/media?parent=31279"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/categories?post=31279"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/tags?post=31279"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}