Instructions for your draft Apply activity

Your task is to investigate the current networking and security structures within a project you are involved within your organisation and how that interacts with pipelines and IDEs. 

Your submission should include the following steps:

1. Investigate online available IDEs that could be used by your company and write a comparison against current IDEs to see differences between what you use now.
  1. Compare the following between them and make suggestions as to which you should use:
  2. Ease of use
  3. Add-Ons for the different codebase
  4. Cost
  5. Freeware / Propriety 
2. Design a map of your network architecture. This will involve (but is not limited to) the below points:
  1. What IP ranges do you use and what is still available?
  2. What ranges have been designated for experimental use whilst in the development phase?
  3. Show the use of OWASP when building network connections.
  4. What is the DNS naming convention used? Do you have a test convention for App development?
  5. How do you audit against Route DNS system trying to steal development data?
  6. How do you audit against non-authorised DHCP requests?
3. Be sure to include a summary of why you use this configuration, and whether there is a better more secure you could use.
  1. Investigate the security measure taken on your development network and list (without breaking any Security policies) what you use to ensure any SDLC material is secure:
  2. Do you use multi-factor authentication and, if so, what methods?
  3. What is currently considered the best multi-factor approach?
  4. What tenant isolation technique do you use for each SDLC project?
  5. What physical security measures are in place?
4. Summarise any improvements you believe will lead to better security for your DevOps area:
  1. Briefly explain what audit system you use to show authorised access
  2. What system object do you audit against?
  3. What is the procedure for firewall audits?
  4. What is the procedure for network access audit?
  5. What’s the retention policy for log’s – do we have different ones for each system?
  6. What audit logs do you use personally, and why those? 
  7. In your research did you come across any other material or methods of analysis that would improve your ability to find the crucial data within the logs?
Extension/Optional Discovery
- Whilst there are frameworks downloadable that allow you to practise and test an abundance of different IDEs to use, there are also frameworks that allow a hacker to check your system out for weaknesses.
- Some of these can be used within DevOps to not only check your system, but also your code for just these vulnerabilities.
- Research the different Frameworks that are available – if available, try installing one in a test environment and check out your SDLC network portion. Please ensure you do work with your InfoSec people and your supervisor for this.
- Please remember to reference where you read/acquired the frameworks from.
When you're ready, select Next to continue

Extension/Optional Discovery

Whilst there are frameworks downloadable that allow you to practise and test an abundance of different IDEs to use, there are also frameworks that allow a hacker to check your system out for weaknesses.
Some of these can be used within DevOps to not only check your system, but also your code for just these vulnerabilities.
Research the different Frameworks that are available – if available, try installing one in a test environment and check out your SDLC network portion. Please ensure you do work with your InfoSec people and your supervisor for this.
Please remember to reference where you read/acquired the frameworks from.

When you're ready, select Next to continue

Instructions for your draft Apply activity

Your task is to investigate the current networking and security structures within a project you are involved within your organisation and how that interacts with pipelines and IDEs.

Investigate online available IDEs that could be used by your company and write a comparison against current IDEs to see differences between what you use now.

Design a map of your network architecture. This will involve (but is not limited to) the below points:

Be sure to include a summary of why you use this configuration, and whether there is a better more secure you could use.

Summarise any improvements you believe will lead to better security for your DevOps area:

Extension/Optional Discovery

Extension/Optional Discovery

Your task is to investigate the current networking and security structures within a project you are involved within your organisation and how that interacts with pipelines and IDEs. 

Instructions | DOL4 FL 3A |