Certified Application Security Engineer (CASE) .NET Training Course

Name: Introduction To Certified Application Security Engineer (CASE) .NET Training Course | Henry Harvin
Uploaded: 2023-02-27 12:02:53

Module 1: Understanding Application Security, Threats and Attacks
In this module, understand the concepts of application security, threats, attacks, need of application security, how to secure application security, and more
- What is a Secure Application?
- Need for Application Security
- Most Common Application Level Attacks
- Why do Applications become Vulnerable to Attacks?
- What Constitutes Comprehensive Application Security?
- Insecure Application: A Software Development Problem
- Software Security Standards, Models and Frameworks
Module 2: Security Requirements Gathering
In this module, learn about security requirements gathering along with security use case modeling, abuser and security stories, and more
- Importance of Gathering Security Requirements
- Security Requirement Engineering (SRE)
- Abuse Case and Security Use Case Modeling
- Abuser and Security Stories
- Security Quality Requirements Engineering (SQUARE)
- Operationally Critical Threat, Asset and Vulnerability Evaluation (OCTAVE)
Module 3: Secure Application Design and Architecture
In this module, learn about application security designs and architectures, secure design principles, threat modeling, and more
- Relative Cost of Fixing Vulnerabilities at Different Phases of SDLC
- Secure Application Design and Architecture
- Goal of Secure Design Process
- Secure Design Actions
- Secure Design Principles
- Threat Modeling
- Decompose Application
- Secure Application Architecture
Module 4: Secure Coding Practices for Input Validation
In this module learn about secure coding practices, input filtering, input validation, and more
- Input Validation
- Why Input Validation?
- Input Validation Specification
- Input Validation Approaches
- Input Filtering
- Secure Coding Practices for Input Validation: Web Forms
- Secure Coding Practices for Input Validation: ASP.NET Core
- Secure Coding Practices for Input Validation: MVC
Module 5: Secure Coding Practices for Authentication and Authorization
In this module, know about the secure coding practices for authentication and authorization.
- Authentication and Authorization
- Common Threats on User Authentication and Authorization
- Authentication and Authorization: Web Forms
- Authentication and Authorization: ASP .NET Core
- Authentication and Authorization: MVC
- Authentication and Authorization Defensive Techniques : Web Forms
- Authentication and Authorization Defensive Techniques : ASP .NET Core
- Authentication and Authorization Defensive Techniques : MVC
Module 6: Secure Coding Practices for Cryptography
In this module, learn about secure coding practices for cryptography, Ciphers, Hashing, Digital Signatures, Digital Certificates, XML Signatures, Symmetric Encryption, and more
- Cryptographic
- Ciphers
- Block Ciphers Modes
- Symmetric Encryption Keys
- Asymmetric Encryption Keys
- Functions of Cryptography
- Use of Cryptography to Mitigate Common Application Security Threats
- Cryptographic Attacks
- Techniques Attackers Use to Steal Cryptographic Keys
- ASP.NET Core Specific Secure Cryptography Practices
- XML Signatures
- Digital Certificates
- Digital Signatures
- Hashing
- Asymmetric Encryption: Defensive Coding Techniques
- Asymmetric Encryption
- Symmetric Encryption: Defensive Coding Techniques
- Symmetric Encryption
- .NET Cryptographic Class Hierarchy
- .NET Cryptographic Name Spaces
- What should you do to Secure .Net Applications for Cryptographic Attacks
Module 7: Secure Coding Practices for Session Management
In this module, gain understanding of Exception/ Error Handling, Coding practices against Information Disclosure, and more
- What are Exceptions/Runtime Errors ?
- Need for Secure Error/Exception Handling
- Consequences of Detailed Error Message
- Exposing Detailed Error Messages
- Considerations: Designing Secure Error Messages
- Secure Exception Handling
- Handling Exceptions in an Application
- Defensive Coding practices against Information Disclosure
- Defensive Coding practices against Improper Error Handling
- ASP .NET Core: Secure Error Handling Practices
- Secure Auditing and Logging
- Tracing .NET
- Auditing and Logging Security Checklists
Module 8: Static and Dynamic Application Security Testing (SAST and DAST)
In this module, learn about Static Application Security Testing, SAST Finding, SAST report, Proxy-based Security Testing Tools, and more
- Static Application Security Testing
- Manual Secure Code Review for Most Common Vulnerabilities
- Code Review: Check List Approach
- SAST Finding
- SAST Report
- Dynamic Application Security Testing
- Automated Application Vulnerability Scanning Tools
- Proxy-based Security Testing Tools
- Choosing between SAST and DAST
Module 9: Secure Deployment and Maintenance
In this module, learn about Secure Deployment, Deployment Activities, Web Application Firewall (WAF), ISAPI Filters, and more
- Secure Deployment
- Prior Deployment Activity
- Deployment Activities: Ensuring Security at Various Levels
- Ensuring Security at Host Level
- Ensuring Security at Network Level
- Ensuring Security at Application Level
- Web Application Firewall (WAF)
- Ensuring Security at IIS Level
- Sites and Virtual Directories
- ISAPI Filters
- Ensuring Security at .NET Level
- Ensuring Security at SQL Server Level
- Security Maintenance and Monitoring
Module 10: Complimentary Module 1: Soft Skills Development
- Business Communication
- Preparation for the Interview
- Presentation Skills
Module 11: Complimentary Module 2: Resume Writing
- Resume Writing

Know the complete offerings of our Certified Application Security Engineer .NET Course