Integration von Sicherheit in DevOps-Prozesse: SAST, DAST, Dependency Scanning, Secrets Management und sichere CI/CD-Pipelines für frühzeitige Schwachstellenbehebung.

Comprehensive hands-on Linux security training covering the full attack surface: user model hardening, filesystem permissions, capabilities, kernel hardening, firewalls with nftables, intrusion detection with auditd, log management, rootkit detection, container security, and live incident response.

Three-day hands-on SELinux course: mandatory access control architecture, SELinux modes, security contexts (users, roles, types, levels), policy concepts, file and process labelling, user mapping, role transitions, process domains, network labelling, boolean management, audit log analysis, writing and compiling custom type-enforcement policies, and practical troubleshooting with audit2allow.