Software Composition Analysis Courses and Certifications

Learn to integrate security into DevOps, covering vulnerabilities, tools for code analysis, and best practices. Gain skills to implement secure software development throughout the entire pipeline, from planning to deployment and monitoring.

• Cybrary
• 4-5 hours
• Self-Paced
• Paid Course

Certified DevSecOps Professional

Master DevSecOps by integrating security into development pipelines, automating vulnerability management, and implementing secure CI/CD practices for faster, safer deployments.

• Independent
• Self-Paced
• Paid Course

NDC Conferences

Protect Yourself Against Supply Chain Attacks

Explore supply chain attack vectors, from CI/CD pipeline vulnerabilities to package squatting, and learn protective measures for securing your development environment.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

NDC Conferences

The Developer's Field Guide to Software Security

Practical guide for integrating security into DevOps without slowing down. Learn strategies, tools, and best practices to improve software security posture while maintaining rapid deployment.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Black Hat

Effective Vulnerability Discovery with Machine Learning

Explore machine learning techniques for effective vulnerability discovery in software dependencies, enhancing security analysis beyond traditional methods.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

OWASP Flagship Projects - OWASP Dependency-Check

Learn to identify and mitigate vulnerabilities in software dependencies using OWASP Dependency-Check, enhancing application security through effective composition analysis.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

NDC Conferences

Application Security from Start to Finish

Comprehensive guide to integrating security throughout the development process, covering secure environments, dependency management, vulnerability scanning, and advanced testing techniques.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Hackitect's playground

DevSecOps: Connecting Developers, Security, and Operations

Explore DevSecOps methodology, connecting developers, security, and operations. Learn about tooling, cloud security automation, and the importance of continuous learning in fostering a collaborative DevSecOps culture.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Hackitect's playground

Snyk Free DevSecOps Tools and Resources

Explore Snyk's free DevSecOps tools for identifying and addressing vulnerabilities in your code, regardless of programming language. Learn to enhance application security with powerful resources.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

ByteGrad

Secure Your App Before It's Too Late - SAST, SCA, SBOM - AI Security

Discover essential app security practices with SAST, SCA, and SBOM techniques using AI-powered tools to protect your applications from vulnerabilities before deployment.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

DefCamp

Securing Without Slowing - DefCamp - 2017

Explore DevOps-inspired strategies for enhancing security without compromising speed. Learn about rugged DevOps, pipeline protection, and automation to create robust, efficient systems.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Security as a Service - Work Where You Engineers Live

Integrating security into existing development workflows for efficient vulnerability management and faster response times. Learn how to leverage automation and project tracking tools to enhance security practices.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Hack in Paris

Building Systems on Shaky Grounds - 10 Tactics to Manage the Modern Supply Chain

Explore 10 tactics for managing modern software supply chains, balancing open-source benefits with security risks. Learn to assess vendors, conduct red team exercises, and implement effective incident response strategies.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

LASCON

Knowing What Risks Matter and Don't in Your Open Source

Explore key findings on open-source software risks, including usage trends, vulnerability rates, and best practices. Learn to prioritize and address critical issues in application security.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

LASCON

Introduction to Inner-Loop Security - Shifting Left, but Better

Explore inner-loop security as the next evolution of "shift left," enabling developers to build secure-by-design products through improved methodologies and tools.

• YouTube
• 50 minutes
• Self-Paced
• Free Video