• Online, Self-Paced
Course Description

Building security testing into the software development life cycle is the best way to protect your app and your end users. This course identifies tools and techniques that developers can use to minimize the cost and impact of security testing—while maximizing its impact and effectiveness. In this course, instructor Jerod Brennen focuses on online testing, using security scanning, penetration testing, and vulnerability testing to validate code and uncover vulnerabilities. He explains the difference between positive and negative, manual and automated, and production and nonproduction testing, so you can choose the right kind for your workflow. The hands-on sections—with demos of popular tools such as Fiddler, Burp Suite, and OWASP OWTF—prepare you to apply the lessons in the real world.

Learning Objectives

Positive and negative testing
OWASP Testing Guide
Manual vs. automated testing
Scanning vs. pen testing
Testing in the right environment
Pen testing a web app
Evading SIEMs
Coordinating red and blue teams
Testing for OWASP Top Ten vulnerabilities

Framework Connections