Details 68 Courses, 27 Hours, 33 CPE Credits
Core
Provides an understand of security principles and best practices for developing secure applications and secure database. Coursers focus on fundamentals of application security, application security risk management, common vulnerabilities in an application, and threat modeling.
Courses Include
- AWA 101 Fundamentals of Application Security
- AWA 102 Secure Software Concepts
- COD 102-108 Fundamentals of SDLC Security Series (7)
- COD 141 Fundamentals of Secure Database Development
- COD 152 Fundamentals of Secure Cloud Development
- ENG 205 Fundamentals of Threat Modeling
Advanced
Provides learners with the tools required to meet the Payment Card Industry Data Security Standards (PCI DSS) for systems that transmit, process, and/or store cardholder data. Courses provide a framework for developing secure applications, explain testing procedures and provide guidance for mitigating OWASP Top 10 and the consequences of CWE’s most dangerous software errors while diving into basic concepts of cryptography and common ways that it is applied, from the perspective of application development while learning to test for vulnerabilities and mitigate security vulnerabilities.
Courses Include
- COD 225-230 IoT Specialization Series (6)
- COD 241 Creating Secure Oracle Database Applications
- COD 246-249 PCI Compliance for Developers Series (4)
- COD 251 Defending AJAX-enabled Web Applications
- DES 202-205 Fundamentals of Cryptography Series (4)
- DES 214-218 Secure Enterprise Infrastructure Series (4)
- DES 222-231 Applying OWASP 2017 Mitigations Series (10)
- TST 253 Testing for Classic Buffer Overflow
- TST 255 Testing for Missing Authorization
- TST 257 Testing for Use of Hard-Coded Credentials
- TST 258 Testing for Missing Encryption of Sensitive Data
- TST 259 Testing for Unrestricted Upload of File with Dangerous Type
- TST 260 Testing for Reliance on Untrusted Inputs in a Security Decision
- TST 261 Testing for Execution with Unnecessary Privileges
- TST 262 Testing for Cross-Site Request Forgery
- TST 264 Testing for Download of Code without Integrity Check
- TST 266 Testing for Inclusion of Functionality from Untrusted Control Sphere
- TST 267 Testing for Incorrect Permission Assignment for Critical Resource
- TST 268 Testing for Use of a Potentially Dangerous Function
- TST 269 Testing for Use of a Broken or Risky Cryptographic Algorithm
- TST 272 Testing for Open Redirect
- TST 273 Testing for Uncontrolled Format String
Elite
Provides learners with an understanding of secure architecture and design principles while articulating security requirements to be considered during the requirements phase. This path also introduces the learners to threat modeling to help identify security design problems early in the application security design process. Developers will learn to define the attack surface of an application and how to reduce the risk to an application by minimizing the application’s attack surface, and guidelines for secure source code review.
Courses Include
- DES 101 Fundamentals of Secure Architecture
- DES 212 Architecture Risk Analysis and Remediation
- ENG 191-195 Implementing the MS SDL into your SDLC Series (5)
- ENG 211 How to Create Application Security Design Requirements
- ENG 311 Attack Surface Analysis and Reduction
- ENG 312 How to Perform a Security Code Review
Details 68 Courses, 27 Hours, 33 CPE Credits
Core
Provides an understand of security principles and best practices for developing secure applications and secure database. Coursers focus on fundamentals of application security, application security risk management, common vulnerabilities in an application, and threat modeling.
Courses Include
- AWA 101 Fundamentals of Application Security
- AWA 102 Secure Software Concepts
- COD 102-108 Fundamentals of SDLC Security Series (7)
- COD 141 Fundamentals of Secure Database Development
- COD 152 Fundamentals of Secure Cloud Development
- ENG 205 Fundamentals of Threat Modeling
Advanced
Provides learners with the tools required to meet the Payment Card Industry Data Security Standards (PCI DSS) for systems that transmit, process, and/or store cardholder data. Courses provide a framework for developing secure applications, explain testing procedures and provide guidance for mitigating OWASP Top 10 and the consequences of CWE’s most dangerous software errors while diving into basic concepts of cryptography and common ways that it is applied, from the perspective of application development while learning to test for vulnerabilities and mitigate security vulnerabilities.
Courses Include
- COD 225-230 IoT Specialization Series (6)
- COD 241 Creating Secure Oracle Database Applications
- COD 246-249 PCI Compliance for Developers Series (4)
- COD 251 Defending AJAX-enabled Web Applications
- DES 202-205 Fundamentals of Cryptography Series (4)
- DES 214-218 Secure Enterprise Infrastructure Series (4)
- DES 222-231 Applying OWASP 2017 Mitigations Series (10)
- TST 253 Testing for Classic Buffer Overflow
- TST 255 Testing for Missing Authorization
- TST 257 Testing for Use of Hard-Coded Credentials
- TST 258 Testing for Missing Encryption of Sensitive Data
- TST 259 Testing for Unrestricted Upload of File with Dangerous Type
- TST 260 Testing for Reliance on Untrusted Inputs in a Security Decision
- TST 261 Testing for Execution with Unnecessary Privileges
- TST 262 Testing for Cross-Site Request Forgery
- TST 264 Testing for Download of Code without Integrity Check
- TST 266 Testing for Inclusion of Functionality from Untrusted Control Sphere
- TST 267 Testing for Incorrect Permission Assignment for Critical Resource
- TST 268 Testing for Use of a Potentially Dangerous Function
- TST 269 Testing for Use of a Broken or Risky Cryptographic Algorithm
- TST 272 Testing for Open Redirect
- TST 273 Testing for Uncontrolled Format String
Elite
Provides learners with an understanding of secure architecture and design principles while articulating security requirements to be considered during the requirements phase. This path also introduces the learners to threat modeling to help identify security design problems early in the application security design process. Developers will learn to define the attack surface of an application and how to reduce the risk to an application by minimizing the application’s attack surface, and guidelines for secure source code review.
Courses Include
- DES 101 Fundamentals of Secure Architecture
- DES 212 Architecture Risk Analysis and Remediation
- ENG 191-195 Implementing the MS SDL into your SDLC Series (5)
- ENG 211 How to Create Application Security Design Requirements
- ENG 311 Attack Surface Analysis and Reduction
- ENG 312 How to Perform a Security Code Review