Prerequisite: SDEV 360. An examination of the risks and threats associated with application development. The objective is to identify valuable assets, create system architecture diagrams, decompose applications, identify and prioritize threats, and document results in a threat model. Topics include security requirements and objectives, threat identification and mitigation, and calculating risk.
After completing this course, you should be able to:
- Analyze the security and technical components of a software application
- Document risk and threat models associated with a software application
- Identify threats, attacks, vulnerabilities, and countermeasures to mitigate potential software vulnerabilities
- Select and use appropriate tools to identify and mitigate risks in a software application