Securing Containerized Workloads

Key Takeaways

• Master foundational container security. Gain a comprehensive understanding of the basic building blocks of containerizing applications, from writing container build files to building minimal attack surface images and enforcing runtime security controls.
• Learn hardening techniques for container applications and runtime platforms. Participants will learn how to implement security measures within container runtime platforms, including effective secrets management, access control, security as code policy enforcement, application containment for multi-tenanted environments and continuous threat detection.
• Implement left-shift security in CI/CD pipelines. Develop skills to build secure CI/CD pipelines with a left-shift approach by implementing vulnerability scanning, policy validation, and automated security testing early in the development lifecycle.
• Challenged by practical, real-world scenario workshops. Daily hands-on workshops with realistic real-world scenarios to reinforce theoretical knowledge using popular tools.

Who Should Attend

• DevOps engineers
• Security engineers and cloud security professionals
• Site Reliability engineers
• Solution architects
• Technical leads

Pre-requisites

• Basic Linux shell skills. Comfortable with using the terminal to navigate directories and use basic tools like grep, cat, ls, cd, etc.
• Basic networking concepts. Understand fundamental networking concepts such as basic network protocols, IP addresses and ports.
• Container fundamentals. Experience with building and running containers.
• Kubernetes fundamentals. Familiarity with key concepts such as Namespace, Pods, Deployment and Services.

What to Bring

No printed copies of course materials are issued.
Participants must bring their laptops with power charger to access and download course materials.

Please see below for the tech specs:

What Will Be Covered

• Building secure images. Build secure images by understanding the security challenges in a container's lifecycle and how to mitigate them. 
• Maintaining the integrity of the runtime environment. Use tools to catch deployment misconfigurations, manage sensitive data, and enforce policies.  
• Ensure service availability. Strategies to ensure service uptime with auto-scaling, access controls, resource quotas, and runtime confinement.  
• Continuous runtime monitoring. Implement rules and policies to detect and respond to security threats and intrusions in real-time. 
• Left-shift security in CI/CD pipelines. Integrate security practices into CI/CD pipelines, including image scanning, detecting secret leaks, supply chain scanning, signing images and generating SBOM. 

Fees & Subsidies

1. All fees and subsidies are valid from January 2024, unless otherwise advised.
2. All self-sponsored Singaporeans aged 25 and above can use their SkillsFuture Credit to pay for course fees. For more information about SkillsFuture Credit, click here.
3. From 1st January 2024, the GST will be increased to 9%.

Certificate

The ISS Certificate of Completion will be issued to participants who have attended at least 75% of the course and pass the required assessments.

Preparing for Your Course

NUS-ISS Course Registration Terms and Conditions

Find out more.

NUS-ISS and Learner’s Commitment and Responsibilities

Find out more.

WIFI Access

WIFI access will be made available to participants.

Venue

NUS-ISS
25 Heng Mui Keng Terrace
Singapore 119615

Click HERE for directions to NUS-ISS

In the event of a change of venue, participants are advised to refer to the acceptance email sent one week prior to the commencement date.

Course Confirmation

All classes are subject to confirmation and NUS-ISS will send an acceptance email to participants one week prior to the commencement date. Confirmed registrants are to attend and complete all lectures, class exercises, workshops and assessments (where applicable). Additionally, all responses to feedbacks and surveys conducted by NUS-ISS and its partners must be submitted. All training and assessments will be delivered as described in the course webpage.

General Enquiry

Please feel free to write to ask-iss@nus.edu.sg if you have any enquiry or feedback.