Sdlc_python

screenshot of Sdlc_python

sdlc_python 是一个基于python语言构建的devsecops平台,旨在促进 DevSecOps 和安全开发生命周期 (SDLC) 实践。它通过模拟常见漏洞来增强开发人员的安全意识(对应sdlc中对开发人员的安全培训),并且使用了大模型进行代码安全审计(对应sdlc中代码审计阶段),帮助企业进行安全左移。除了用于 DevSecOps 实践外,sdlc_python 还可以用于学习漏洞知识、渗透测试和代码审计。本项目采用了前后端分离的设计模式,其中后端利用了轻量级框架 Flask,而前端则使用了 Vue 3。

Overview

sdlc_python is a dynamic DevSecOps platform designed specifically with Python, aligning with the principles of the Secure Development Lifecycle (SDLC). It aims to cultivate a robust security awareness among developers by simulating common vulnerabilities, making it an essential tool for any organization looking to enhance their security training practices. Furthermore, it leverages advanced models for comprehensive code security auditing, enabling businesses to adopt a proactive stance in managing security risks.

This platform not only caters to traditional DevSecOps practices but also serves as an educational resource for learning about vulnerabilities, conducting penetration testing, and implementing effective code audits. The strategic separation of front-end and back-end components, utilizing Flask for the back-end and Vue 3 for the front-end, streamlines overall functionality and user interaction.

Features

  • Front-End and Back-End Separation: The architecture allows the back-end to manage business logic while the front-end focuses on user interface and interaction, enhancing overall efficiency.
  • Lightweight and Efficient: Built on the Flask framework, this platform is designed to be both lightweight and performance-efficient, supporting quick and responsive application development.
  • Comprehensive Code Scanning: Employs advanced models to conduct thorough security checks on the code, ensuring vulnerabilities are identified and addressed early in the SDLC process.
  • User Training Simulation: The platform simulates real-world vulnerabilities, providing developers with valuable hands-on experience that enhances their security awareness.
  • Flexible Learning Opportunities: It serves as a valuable learning tool for understanding vulnerabilities and performing penetration testing, which can greatly benefit security teams and developers alike.
  • Ease of Installation: The installation process is straightforward, requiring just a download of the release package and a simple execution of the provided start.bat file for quick access.
  • User-Friendly Interface: Designed with attention to user experience, the front-end interface is intuitive, making it easier for users to navigate and utilize the various features effectively.