Core Developer

Core

• Fundamentals of Application Security
• Secure Software Concepts
• Fundamentals of Secure Development
• Fundamentals of Secure Database Development
• Fundamentals of Threat Modeling

Advanced

• Fundamentals of Cryptography Series (4)
• Applying OWASP 2017 Mitigations Series (10)
• Implementing the MS SDL into your SDLC (5)
• Testing for Missing Authentication for Critical Function
• Testing for Use of Hard-Coded Credentials
• Testing for Unrestricted Upload of File with Dangerous Type
• Testing for Reliance on Untrusted Inputs in A Security Decision
• Testing for Execution with Unnecessary Privileges
• Testing for Download of Code Without Integrity Check
• Testing for Inclusion of Functionality from Untrusted Control Sphere
• Testing for Incorrect Permission Assignment for Critical Resource
• Testing for Use of a Potentially Dangerous Function
• Testing for Improper Restriction of Excessive Authentication Attempts
• Testing for Open Redirect
• Testing for Uncontrolled Format String

Elite

• Fundamentals of Secure Architecture
• Architecture Risk Analysis and Remediation
• Creating Secure Application Architecture
• Integrating the MS SDL into your SDLC Series (5)
• How to Create Application Security Design Requirements
• Attack Surface Analysis & Reduction
• How to Perform a Security Code Review