The CASE certified training program is developed concurrently to prepare software professionals with the necessary capabilities that are expected by employers and academia globally. It is designed to be a hands-on, comprehensive application security course that will help software professionals create secure applications.
The training program encompasses security activities involved in all phases of the Software Development Lifecycle (SDLC): planning, creating, testing, and deploying an application. Although Java has come a long way from its development in 1995, cyber crime has also spread, reaching epidemic levels, increasing the need for secure Java developers, regardless of whether they're creating a new program or upgrading revising an old one.
In-depth understanding of secure SDLC and secure SDLC models
Knowledge of OWASP Top 10, threat modelling, SAST and DAST
Capturing security requirements of an application in development
Defining, maintaining, and enforcing application security best practices
Performing manual and automated code review of application
Conducting application security testing for web applications to assess the vulnerabilities
Driving development of a holistic application security program
Rating the severity of defects and publishing comprehensive reports detailing associated risks and mitigations
Working in teams to improve security posture
Application security scanning technologies such as AppScan, Fortify, WebInspect, static application security testing (SAST), dynamic application security testing (DAST), single sign-on, and encryption
Following secure coding standards that are based on industry-accepted best practices such as OWASP Guide, or CERT Secure Coding to address common coding vulnerabilities.
Creating a software source code review process that is a part of the development cycles (SDLC, Agile, CI/CD)