C)SWAE: Certified Secure Web Application Engineer
Target group
- Pen Testers
- Security Officers
- Ethical Hackers
- Network Auditors
- Vulnerability assessors
- System Owners and Managers
- Cyber Security Engineers
Description
Secure Web Application Engineers work to design information systems that are secure on the web. Organizations and governments fall victim to internetbased attacks every day. In many cases, web attacks could be thwarted but hackers, organized criminal gangs, and foreign agents are able to exploit weaknesses in web applications. The Secure Web programmer knows how to identify, mitigate and defend against all attacks through designing and building systems that are resistant to failure. With this course you will learn how to develop web applications that aren’t subject to common vulnerabilities, and how to test and validate that their applications are secure, reliable and resistant to attack.
Program
- Duration : 5 days
Module 01: Web Application Security
Module 02: Secure SDLC
Module 03: OWASP Top 10
Module 04: Risk Management
Module 05: Threat Modeling
Module 06: Authentication and Authorization Attacks
Module 07: Session Management
Module 08: Security Architecture
Module 09: Data Validation
Module 10: AJAX Security
Module 11: Insecurity Code Review and Mitigation
Module 12: Application Mapping Analysis
Module 13: Cryptography
Module 14: Web Application Penetration Testing
Detailed lab outline :
- Lab 01: Environment Setup and Architecture
- Lab 02: OWASP TOP 10 2013
- Lab 03: Threat Modeling
- Lab 04: Application Mapping & Analysis
- Lab 05: Authentication and Authorization attacks
- Lab 06: Session Management attacks
- Lab 09: AJAX Security
- Lab 10: Code Review and Security Testing
- Lab 11: Alternatives Labs
Goal
Upon completion, Certified Secure Web Application Engineer students will be able to establish industry acceptable auditing standards with current best practices and policies. Students will also be prepared to competently take the C)SWAE exam.
Prerequisites
- Sound knowledge of networking
- At least one coding language
- Linux understanding
- Open shell Or 24 months experience in software technologies and security.
- Language : Anglais
- Level : Level 400
- Certification body : Mile2
- Certification: Yes
- Accessibility : Yes
- Duration: 5 days