• Online, Self-Paced
Course Description
Widespread adoption of cloud computing and DevOps have led to containers becoming the most popular and efficient way to deploy applications. However, containerization presents enterprise security risks that question existing security policies and compliance frameworks. This course provides a necessary understanding of known attacks required to improve the security of container application deployments.

Learning Objectives

On successful completion of this course, learners should have the knowledge and skills to:

  • Use tools in the development stage to help convert requirements into source code.
  • Leverage the security features available in most integrated development environments (IDEs) for multiple programming language support
  • Identify and mitigate the most common IaC vulnerabilities, including Weak Authentication Tokens, Disclosure of Authentication Credentials, Excessive Privileges or Capabilities, Misconfigured Network Filtering and Missing Encryption

Framework Connections

The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.