Course Overview
Learning Objectives
In-depth understanding of secure SDLC and secure SDLC models
Knowledge of OWASP Top 10, threat modelling, SAST and DAST
Capturing security requirements of an application in development
Defining, maintaining, and enforcing application security best practices
Performing manual and automated code review of application
Conducting application security testing for web applications to assess the vulnerabilities
Driving development of a holistic application security program
Rating the severity of defects and publishing comprehensive reports, detailing associated risks and mitigations
Working in teams to improve security posture
Application security scanning technologies such as AppScan, Fortify, WebInspect, static application security testing (SAST), dynamic application security testing (DAST), single sign on, and encryption
Following secure coding standards that are based on industry-accepted best practices such as OWASP Guide, or CERT Secure Coding to address common coding vulnerabilities.
Creating a software source code review process that is a part of the development cycles (SDLC, Agile, CI/CD)
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):