Certified Software Security Professional

Current Status

Not Enrolled

Price

Closed

Get Started

This course is currently closed

You must login before you access the courses page.

Course Content

Expand All

Security Concepts 4 Topics

Expand

Lesson Content

0% Complete 0/4 Steps

Security Models 3 Topics

Expand

Lesson Content

0% Complete 0/3 Steps

Security Models

Trust Models, Trusted Computing and TPM

Access Controls

Security Planning and Policy 3 Topics

Expand

Lesson Content

0% Complete 0/3 Steps

Security Planning

Risk Assessment for Security

Security Policies and Guidelines

Security Attacks 7 Topics

Expand

Lesson Content

0% Complete 0/7 Steps

Computer Security

Security Attack Classes

System Attacks

Network Attacks

Authentication Attacks

Spoofing Attacks

Social Engineering

Programming Attacks 8 Topics

Expand

Lesson Content

0% Complete 0/8 Steps

Cryptography 8 Topics

Expand

Lesson Content

0% Complete 0/8 Steps

Cryptography Basics

Evolution and Data Encryption Methods

Symmetric and Asymmetric key Cryptography

Private and Public Key Exchange

Stream and Block Ciphers

Secret Key Cryptography

Message Authentication and Hash Functions

Digital Signatures and Public Key Infrastructure

C/C++ Security 6 Topics

Expand

Lesson Content

0% Complete 0/6 Steps

Dynamic Memory Management

Pointers

.Net Security 9 Topics

Expand

Lesson Content

0% Complete 0/9 Steps

.NET Architectural Components

Secure Coding Guidelines

ASP.NET Web Application Security

Security Practices for Web Applications

Java Security 7 Topics

Expand

Lesson Content

0% Complete 0/7 Steps

Java Architecture

Java Security Basics

Permissions and Security Policy

Access Control

Secure Class Loading

Security Management

Secure Coding Guidelines

Networking and SOA Security 7 Topics

Expand

Lesson Content

0% Complete 0/7 Steps

What is SOA, WSDL and Web Service

SOA Attacks

SOA Security

SSL

Web Services and Security

Java RMI and Security

ActiveX and Security

Web Application Security 4 Topics

Expand

Lesson Content

0% Complete 0/4 Steps

Web Basics

Web Server Attacks

Web Server Security

Web Application Attacks and Security

Physical Security 4 Topics

Expand

Lesson Content

0% Complete 0/4 Steps

What is physical Security

Natural Events

Authentication Controls

Physical Security Measures

Secured Software Development Life Cycle 10 Topics

Expand

Lesson Content

0% Complete 0/10 Steps

Software Development Life Cycle (SDLC)

Waterfall Model

Agile or Extreme development model

Secure SDLC

Security Methodology

Secure Software Requirements

Secure Software Design

Threat Modeling

Secure Coding

Secure Software Testing

Cloud and Mobile Security 5 Topics

Expand

Lesson Content

0% Complete 0/5 Steps

Cloud Computing Basics

Emerging Trends 3 Topics

Expand

Lesson Content

0% Complete 0/3 Steps

IoT Security

Big Data Security

New Threats

Video Course 1 – Introduction to the Course 4 Topics

Expand

Lesson Content

0% Complete 0/4 Steps

Introduction to Application Security

Application Security Terms and Definitions

Application Security Goals

OWASP WebGoat Demo

Introduction to OWASP Top 10 and More Items 7 Topics

Expand

Lesson Content

0% Complete 0/7 Steps

Introduction to OWASP Top 10

SANS Top 25

Threat Actors and More Definitions

Defense In-Depth

Proxy Tools

Demo of Fiddler with JuiceShop

API Security

Dive into the OWASP Top 10 10 Topics

Expand

Lesson Content

0% Complete 0/10 Steps

Broken Access Control

Cryptographic Failures

Injection

Insecure Design

Security Misconfiguration

Vulnerable and Outdated Components

Identification and Authentication Failures

Software and Data Integrity Failures

Security Logging and Monitoring Failures

Server-Side Request Forgery

Defenses and Tools 11 Topics

Expand

Lesson Content

0% Complete 0/11 Steps

OWASP ZAP (Zed Attack Proxy)

Running a ZAP Scan

Cross-Site Scripting

CSP (Content Security Policy)

CSP Demo

Security Models

Scanning for OSS Vulnerabilities with Software Composition Analysis

SKF (Security Knowledge Framework)

SKF Demo

SKF Labs Demo

Source Code Review

Session Management 6 Topics

Expand

Lesson Content

0% Complete 0/6 Steps

Introduction to Session Management

OpenID and OpenID Connect

Risk Rating and Threat Modeling 8 Topics

Expand

Lesson Content

0% Complete 0/8 Steps

Risk Rating Introduction

Risk Rating Demo

Introduction to Threat Modeling

Type of Threat Modeling

Introduction to Manual Threat Modeling

Manual Threat Model demo

Prepping for Microsoft Threat Model Tool

Microsoft Threat Model Tool demo

Encryption and Hashing 7 Topics

Expand

Lesson Content

0% Complete 0/7 Steps

PKI (Public Key Infrastructure)

Password Management

Password Demo

Frameworks and Process 5 Topics

Expand

Lesson Content

0% Complete 0/5 Steps

HIPAA (Health Insurance Portability and Accountability Act)

PCI DSS (Payment Card Industry Data Security Standard)

DevOps

DevSecOps

Use, Abuse, and Misuse cases

Security Scanning and Testing 8 Topics

Expand

Lesson Content

0% Complete 0/8 Steps

SAST (Static Application Security Testing)

Spot Bugs Demo

DAST (Dynamic Application Security Testing)

IAST (Interactive Application Security Testing)

RASP (Runtime Application Self-Protection)

WAF (Web Application Firewall)

Penetration Testing

SCA (Software Composition Analysis)

Conclusion 1 Topic

Expand

Lesson Content

0% Complete 0/1 Steps

Conclusion

Video Course 2 – Software Security Testing 20 Topics

Expand

Lesson Content

0% Complete 0/20 Steps

Introduction

Environment Setup

Important Terminology

Methodologies and Standards

Software Testing as a Process

The HTTP Protocol

Introduction to Encoding

Information Gathering

Configuration and Management Testing

Identity Management Testing

Authentication Testing

Authorization Testing

Session Management Testing

Input Validation Testing

Error Handling

Cryptography

Business Logic Testing

Client-Side Testing

Reporting

Bonus