EC-Council Certified Application Security Engineer (CASE).NET

Course ObjeCourse Objectives:

– Gain an in-depth understanding of secure Software Development Lifecycle (SDLC) and secure SDLC models

– Acquire knowledge of OWASP Top 10, threat modeling, Static Application Security Testing (SAST), and Dynamic Application Security Testing (DAST)

– Learn to capture the security requirements of an application during the development phase

– Define, maintain, and enforce application security best practices

– Perform both manual and automated code review of applications

– Conduct security testing for web applications to assess vulnerabilities

– Drive the development of a comprehensive application security program

– Gain the ability to rate the severity of defects and publish detailed reports outlining associated risks and mitigations

– Work collaboratively in teams to enhance security posture

– Familiarize with application security scanning technologies such as AppScan, Fortify, WebInspect, single sign-on, and encryption

– Follow secure coding standards based on industry-accepted best practices such as OWASP Guide or CERT Secure Coding to address common coding vulnerabilities

– Create a software source code review process integrated into various development cycles (SDLC, Agile, CI/CD)Course Objectives: