National CAE Designated Institution
  • Online, Instructor-Led
Course Description

Prerequisite: SDEV 360. An examination of the risks and threats associated with application development. The objective is to identify valuable assets, create system architecture diagrams, decompose applications, identify and prioritize threats, and document results in a threat model. Topics include security requirements and objectives, threat identification and mitigation, and calculating risk.

Learning Objectives

After completing this course, you should be able to:

  • Analyze the security and technical components of a software application
  • Document risk and threat models associated with a software application
  • Identify threats, attacks, vulnerabilities, and countermeasures to mitigate potential software vulnerabilities
  • Select and use appropriate tools to identify and mitigate risks in a software application

Framework Connections

The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.