TST 258 - Testing for Missing Encryption of Sensitive Data (CWE-311)

Course Overview

In this course, you will learn how to identify and mitigate CWE-311: Missing Encryption of Sensitive Data.

Topics include:

• Impacts of not encrypting sensitive data
• Techniques for finding missing encryption issues through code review and testing
• Secure coding best practices to ensure encryption of sensitive data
• Technology and platform-specific weaknesses where applicable