Packt+ | Advance your knowledge in tech

You're reading from Security Automation with Ansible 2 Leverage Ansible 2 to automate complex security tasks like application security, network security, and malware analysis

Product type Paperback

Published in Dec 2017

Publisher Packt

ISBN-13 9781788394512

Length 364 pages

Edition 1st Edition

Tools

Ansible

Concepts

Application Security

Authors (2):

Akash Mahajan

AKULA

View More author details

Table of Contents (18) Chapters

Title Page

Credits

About the Authors

About the Reviewer

www.PacktPub.com

Customer Feedback

Preface

1. Introduction to Ansible Playbooks and Roles

2. Ansible Tower, Jenkins, and Other Automation Tools FREE CHAPTER

3. Setting Up a Hardened WordPress with Encrypted Automated Backups

4. Log Monitoring and Serverless Automated Defense (Elastic Stack in AWS)

5. Automating Web Application Security Testing Using OWASP ZAP

6. Vulnerability Scanning with Nessus

7. Security Hardening for Applications and Networks

8. Continuous Security Scanning for Docker Containers

9. Automating Lab Setups for Forensics Collection and Malware Analysis

10. Writing an Ansible Module for Security Testing

11. Ansible Security Best Practices, References, and Further Reading

Summary

Security teams and IT teams rely on tools for vulnerability scanning, management, remediation, and continuous security processes. Nessus, by being one of the most popular and useful tools, was an automatic choice for the authors to try and automate.

In this chapter, we looked at the main activities of vulnerability scanning, such as being able to install and deploy the tool, initiate a scan, and download a report.

In the next chapter, we will delve deeper into system security and hardening. We will look at various open security initiatives and benchmarking projects such as STIG, OpenSCAP, and Center for Internet Security (CIS). We will learn how to integrate them with our playbooks and automation tools, such as Tower and Jenkins. This chapter on vulnerability scanning, and the next one on the security hardening of networks and applications create a solid base to explore more ideas on security automation and keeping your systems secure and hardened.