Application Security Training
Course Authors
Application Security Training Hands-on (Online, Onsite, and Classroom Live)
| Commitment | 3 Days, 7-8 hours a day. |
| Language | English |
| User Ratings | Average User Rating 4.8 See what learners said |
| Price | REQUEST |
| Delivery Options | Instructor-Led Onsite, Online, and Classroom Live |
COURSE OVERVIEW
In this Application Security Training course, you will learn the best practices for designing, implementing, and deploying secure applications. Perhaps just as significantly, with this Application Security course, you will learn about current, real examples that illustrate the potential consequences of not following these best practices. Although this edition of the Application Security course is language-agnostic, it may also be presented using Java, .NET, or other programming languages or environments.
WHAT'S INCLUDED?
- 3 days of Application Security Training with an expert instructor
- Application Security Electronic Course Guide
- Certificate of Completion
- 100% Satisfaction Guarantee
RESOURCES
- Application Security Training – https://www.wiley.com/
- Application Security Training – https://www.packtpub.com/
- Application Security – https://store.logicaloperations.com/
- Application Security – https://us.artechhouse.com/
- Application Security Training – https://www.amazon.com/
RELATED COURSES
- Advanced Computer Forensics Training
- Advanced Digital Forensics, Incident Response, and Threat Hunting Training
- Advanced Reverse Engineering Malware Training
- Advanced Smartphone Forensics Training
- Automated Network Defense Training
- PowerShell Automation and Windows Security Training
- Smartphone Security and Forensics Training
- Windows Exploitation and Analysis (WEA) Training
ADDITIONAL INFORMATION
COURSE OBJECTIVES
Upon completing this Application Security Training course, learners will be able to meet these objectives:
- Concepts and terminology behind defensive coding
- Threat Modeling as a tool for identifying software vulnerabilities based on realistic threats against assets
- The entire spectrum of threats and attacks that take place against software applications in today’s world
- Static code reviews and dynamic application testing for uncovering vulnerabilities in applications
- Vulnerabilities of a programming language as well as how to harden installations
- Cryptography and encryption and where they fit in the overall security picture
- XML Digital Signature and XML Encryption as well as how they are used within the web services arena
- Processes and measures associated with Secure Software Development (SSD)
- Basics of security testing and planning
CUSTOMIZE IT
- We can adapt this Application Security Training course to your group’s background and work requirements at little to no added cost.
- If you are familiar with some aspects of this Application Security course, we can omit or shorten their discussion.
- We can adjust the emphasis placed on the various topics or build the Application Security around the mix of technologies of interest to you (including technologies other than those included in this outline).
- If your background is nontechnical, we can exclude the more technical topics, include the topics that may be of special interest to you (e.g., as a manager or policy-maker), and present the Application Security course in a manner understandable to lay audiences.
AUDIENCE/TARGET GROUP
The target audience for this Application Security Training course:
- Security analysts
- Network security engineers
- Security managers
- Information security officers
- Incidence response analysts
- Network Administrators
CLASS PREREQUISITES
The knowledge and skills that a learner must have before attending this Application Security Training course are:
- There is no prerequisite for this course, but a basic understanding of Windows
COURSE SYLLABUS
Introduction: Misconceptions
- Security: The Complete Picture
- JX: Anatomy of a Disaster?
- Causes of Data Breaches
- Heartland – Slipping Past PCI Compliance
- Target’s Painful Christmas
- Meaning of Being Compliant
- Verizon’s 2013 Data Breach Report
Application Security Training – Security Concepts
- Motivations: Costs and Standards
- Open Web Application Security Project
- Web Application Security Consortium
- CERT Secure Coding Standards
- Assets are the Targets
- Security Activities Cost Resources
- Threat Modeling
- System/Trust Boundaries
Principles of Information Security
- Security Is a Lifecycle Issue
- Minimize Attack Surface Area
- Layers of Defense: Tenacious D
- Compartmentalize
- Consider All Application States
- Do NOT Trust the Untrusted
Vulnerabilities
- Unvalidated Input
- Broken Access Control
- Broken Authentication And Session Management
- Cross-Site Scripting (XSS) Flaws
- Injection Flaws
- Error Handling And Information Leakage
- Insecure Storage
- Insecure Management of Configuration
- Direct Object Access
- Spoofing and Redirects
Security Fundamentals
- Perimeter Defenses
- Security Architectures
- Layered Defenses
- Extending the Defenses
Application Security Training – Cryptography Overview
- Strong Encryption
- Ciphers and Algorithms
- Message Digests
- Keys and Key Management
- Certificate Management
Transport Layer
- SSL Support
- HTTPS
Understanding What’s Important
- Common Vulnerabilities and Exposures
- OWASP Top Ten for 2013
- CWE/SANS Top 25 Most Dangerous SW Errors
- Monster Mitigations
- Strength Training: Project Teams/Developers
- Strength Training: IT Organizations
Defending XML and Services
- Defending XML
- Defending Web Services
Secure Software Development (SDL)
- SDL Process Overview
- Applying Processes and Practices
- Risk Analysis
Security Testing
- Testing Principles
- Reviews as a Form of Testing
- Testing
- Tools
- Testing Practices
