• Online, Self-Paced

In this course you will learn about the different fundamental types of security testing. By the end of this course you will understand threat modeling, how threat modeling applies in the design phase of the SDLC, approaches to threat modeling, vulnerability scanning, penetration testing, static analysis pros and cons, code review pros and cons.

Learning Objectives

On successful completion of this course, learners should have the knowledge and skills to:

  • Describe how threat modeling can be used within the SDLC
  • Identify different approaches to threat modeling
  • Discuss the benefits of vulnerability scanning
  • Discuss the benefits of penetration testing
  • Compare pros and cons of static analysis
  • Compare pros and cons of code review

Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Specialty Areas

  • Test and Evaluation

Specialty Areas have been removed from the NICE Framework. With the recent release of the new NICE Framework data, updates to courses are underway. Until this course can be updated, this historical information is provided to give better context as to how it can help you with your cybersecurity goals.

Feedback

If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.