ENG 211 - How to Create Application Security Design Requirements (Updated)
Course Details
Course Number: ENG 211
Course Duration: 15 minutes
Course CPE Credits: .3
Related Learning Paths
- .NET Developer
- iOS Developer
- Web Developer
- C# Developer
- Cloud Developer
- C++ Developer
- HTML5 Developer
- Back-End Developer
- Core Developer
- Front-End Developer
- IoT & Embedded Developer
- C Developer
- Android Developer
- Java Developer
- JavaScript Developer
- Microsoft SDL Developer
- Mobile Developer
- Node.js Developer
- PCI Developer
- PHP Developer
- Python Developer
- Ruby on Rails Developer
- Swift Developer
- Embedded Test Engineer
- Q/A Test Engineer
- IT Architect
- Embedded Architect
- Software Architect
- Business Analyst
- Systems Analyst
- Database Administrator
- Development Manager
- Information Security Specialist
- Product Owner
- Project Manager
- Application Security Champion
Related Subject Matter
Course Overview
To preserve the confidentiality, integrity, and availability of application data, software applications must be engineered with security in mind. Without defined security requirements, design choices will be made without security guidance and security testing cannot be effective.
This course provides technical and non-technical personnel with the knowledge to understand, create and articulate security requirements as part of a software requirement document.
Topics include:
- Applying the application security maturity (ASM) model to the development process
- Key security engineering activities: gathering security objectives, applying security design guidelines, and creating threat models
- Identifying threats, attacks, vulnerabilities, and countermeasures
- How to conduct impactful security architecture and design reviews to identify potential security problems and minimize the application’s attack surface.