Certified Application Security Engineer (CASE) JAVA Course

Name: Introduction To Certified Application Security Engineer (CASE) JAVA Course | Henry Harvin
Uploaded: 2023-02-17 14:54:16
Description: Learn to focus on the implementation of secure methodologies and practices in a modern-day insecure operating environment | Get hands on training to create a secure Java application software | Gain in-depth understanding of secure applications, threats, attacks, coding practices, phases of SDLC, & more | On successful completion of the training, prepare for the CASE exam.

Module 1: Understanding Application Security, Threats, and Attacks
In this module, learn about application security, threats, attacks, software development problem, and more
- What is Secure Application
- Need for Application Security
- Most Common Application Level Attacks
- Why Applications become Vulnerable to Attacks
- What Constitutes a Comprehensive Application Security?
- Insecure Application: A Software Development Problem
- Software Security Standards, Models, and Frameworks
Module 2: Security Requirements Gathering
In this module, learn about Security Requirement Engineering (SRE), security stories, Security Quality Requirements Engineering (SQUARE), and more
- Importance of Gathering Security Requirements
- Security Requirement Engineering (SRE)
- Abuse Case and Security Use Case Modeling
- Abuser and Security Stories
- Security Quality Requirements Engineering (SQUARE)
- Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE)
Module 3: Secure Application Design and Architecture
In this module, learn about secure application design, architecture, secure design principles, and more
- Relative Cost of Fixing Vulnerabilities at Different Phases of SDLC
- Secure Application Design and Architecture
- Goal of Secure Design Process
- Secure Design Actions
- Secure Design Principles
- Threat Modeling
- Decompose Application
- Secure Application Architecture
Module 4: Secure Coding Practices for Input Validation
In this module, understand secure coding practices for input validation, data validation techniques, Servlet Filters, and more
- Input Validation Pattern
- Validation and Security Issues
- Impact of Invalid Data Input
- Data Validation Techniques
- Input Validation using Frameworks and APIs
- Open Source Validation Framework for Java
- Servlet Filters
- Validation Filters for Servlet
- Data Validation using OWASP ESAPI
- Data Validation: Struts Framework
- Data Validation: Spring Framework
- Input Validation Errors
- Common Secure Coding Practices
Module 5: Secure Coding Practices for Authentication and Authorization
In this module, understand secure coding practices for authentication and authorization
- Introduction to Authentication
- Types of Authentication
- Authentication Weaknesses and Prevention
- Introduction to Authorization
- Access Control Model
- EJB Authorization
- Java Authentication and Authorization (JAAS)
- Java EE Security
- Authorization Common Mistakes and Countermeasures
- Authentication and Authorization in Spring Security Framework
- Defensive Coding Practices against Broken Authentication and Authorization
- Secure Development Checklists: Broken Authentication and Session Management
Module 6: Secure Coding Practices for Cryptography
In this module, learn secure coding practices for cryptography, encryption and secret keys, dos and don’ts in java cryptography, and more
- Java Cryptography
- Encryption and Secret Keys
- Cipher Class
- Digital Signatures
- Secure Socket Layer (SSL)
- Key Management
- Digital Certificates
- Signed Code Sources
- Hashing
- Java Card Cryptography
- Spring Security: Crypto Module
- Dos and Don’ts in Java Cryptography
- Best Practices for Java Cryptography
Module 7: Secure Coding Practices for Session Management
In this module, learn security coding practices for session management, session tracking, and more
- Session Management
- Session Tracking
- Session Management in Spring Security
- Session Vulnerabilities and their Mitigation Techniques
- Best Practices and Guidelines for Secured Sessions Management
- Checklist to Secure Credentials and Session IDs
- Guidelines for Secured Session Management
Module 8: Secure Coding Practices for Error Handling
In this module, learn secure coding practices for error handling, dos and don’ts in error handling, secure coding in logging, and more
- Introduction to Exceptions
- Erroneous Exceptional Behaviors
- Dos and Don’ts in Error Handling
- Spring MVC Error Handling
- Exception Handling in Struts 2
- Best Practices for Error Handling
- Introduction to Logging
- Logging using Log4j
- Secure Coding in Logging
- Secured Practices in Logging
Module 9: Static and Dynamic Application Security Testing (SAST & DAST)
In this module, learn the concept of Static and Dynamic Application Security Testing (SAST & DAST), SAST Finding and report, security testing tools, and more
- Static Application Security Testing
- Manual Secure Code Review for Most Common Vulnerabilities
- Code Review: Check List Approach
- SAST Finding
- SAST Report
- Dynamic Application Security Testing (DAST)
- Automated Application Vulnerability Scanning Tools
- Proxy-based Security Testing Tools
- Choosing Between SAST and DAST
Module 10: Secure Deployment and Maintenance
In this module, learn about secure deployment and maintenance, Secure Deployment, security maintenance, monitoring, and more
- Secure Deployment
- Prior Deployment Activity
- Deployment Activities: Ensuring Security at Various Levels
- Ensuring Security at Host Level
- Ensuring Security at Network Level
- Ensuring Security at Application Level
- Ensuring Security at Web Container Level (Tomcat)
- Ensuring Security in Oracle
- Security Maintenance and Monitoring
Module 11: Complimentary Module 1: Soft Skills Development
- Business Communication
- Preparation for the Interview
- Presentation Skills
Module 12: Complimentary Module 2: Resume Writing
- Resume Writing

Know the complete offerings of our Certified Application Security Engineer (CASE) JAVA Course