DevSecOps and Securing CI/CD Pipelines

  1. Securing the Test Stage
    1. Dynamic Application Security Testing
      1. DAST Fundamentals
        1. Black-Box Testing Principles
          1. Web Application Scanning
            1. API Security Testing
              1. Network Security Assessment
              2. DAST Tool Integration
                1. Commercial DAST Tools
                  1. Burp Suite Enterprise
                    1. Rapid7 AppSpider
                      1. Veracode Dynamic Analysis
                      2. Open Source DAST Tools
                        1. OWASP ZAP
                          1. Nikto
                            1. w3af
                            2. API-Specific DAST Tools
                              1. Pipeline Integration Strategies
                              2. DAST Environment Management
                                1. Test Environment Preparation
                                  1. Test Data Management
                                    1. Environment Isolation
                                      1. Performance Impact Considerations
                                      2. DAST Results Analysis
                                        1. Vulnerability Classification
                                          1. Risk Assessment
                                            1. False Positive Management
                                              1. Remediation Prioritization
                                            2. Interactive Application Security Testing
                                              1. IAST Technology Overview
                                                1. Agent-Based Testing Architecture
                                                  1. Runtime Instrumentation
                                                    1. Real-Time Vulnerability Detection
                                                    2. IAST Tool Implementation
                                                      1. Agent Deployment Strategies
                                                        1. Application Performance Impact
                                                          1. Coverage Analysis
                                                          2. IAST Integration Benefits
                                                            1. Reduced False Positives
                                                              1. Contextual Vulnerability Information
                                                                1. Development Workflow Integration
                                                              2. Security Testing Integration
                                                                1. Security Unit Testing
                                                                  1. Security Function Testing
                                                                    1. Input Validation Testing
                                                                      1. Authentication Testing
                                                                        1. Authorization Testing
                                                                        2. Security Integration Testing
                                                                          1. End-to-End Security Testing
                                                                            1. Cross-Component Security Testing
                                                                              1. Third-Party Integration Security
                                                                              2. Penetration Testing Automation
                                                                                1. Automated Penetration Testing Tools
                                                                                  1. Security Test Case Generation
                                                                                    1. Attack Simulation
                                                                                    2. Fuzz Testing Implementation
                                                                                      1. Fuzzing Fundamentals
                                                                                        1. Fuzzing Tools and Frameworks
                                                                                          1. AFL (American Fuzzy Lop)
                                                                                            1. libFuzzer
                                                                                              1. Peach Fuzzer
                                                                                              2. Input Generation Strategies
                                                                                                1. Crash Analysis and Triage
                                                                                              3. API Security Testing
                                                                                                1. REST API Security Testing
                                                                                                  1. Authentication and Authorization Testing
                                                                                                    1. Input Validation Testing
                                                                                                      1. Rate Limiting Testing
                                                                                                      2. GraphQL Security Testing
                                                                                                        1. Query Complexity Analysis
                                                                                                          1. Authorization Testing
                                                                                                            1. Introspection Security
                                                                                                            2. API Fuzzing and Testing Tools
                                                                                                              1. Postman Security Testing
                                                                                                                1. REST-Assured Security
                                                                                                                  1. Custom API Security Scripts

                                                                                                              Previous

                                                                                                              4. Securing the Build Stage

                                                                                                              Go to top

                                                                                                              Next

                                                                                                              6. Securing the Deployment Stage