Core Developer

Core

• AWA 101 Fundamentals of Application Security
• AWA 102 Secure Software Concepts
• COD 102-108 Fundamentals of SDLC Security Series (7)
• COD 141 Fundamentals of Secure Database Development
• ENG 205 Fundamentals of Threat Modeling

Advanced

• DES 202-205 Fundamentals of Cryptography Series (4)
• DES 222-231 Applying OWASP 2017 Mitigations Series (10)
• ENG 191-195 Implementing the MS SDL into your SDLC (5)
• TST 255 Testing for Missing Authentication for Critical Function
• TST 257 Testing for Use of Hard-Coded Credentials
• TST 259 Testing for Unrestricted Upload of File with Dangerous Type
• TST 260 Testing for Reliance on Untrusted Inputs in A Security Decision
• TST 261 Testing for Execution with Unnecessary Privileges
• TST 264 Testing for Download of Code Without Integrity Check
• TST 266 Testing for Inclusion of Functionality from Untrusted Control Sphere
• TST 267 Testing for Incorrect Permission Assignment for Critical Resource
• TST 268 Testing for Use of a Potentially Dangerous Function
• TST 271 Testing for Improper Restriction of Excessive Authentication Attempts
• TST 272 Testing for Open Redirect
• TST 273 Testing for Uncontrolled Format String

Elite

• DES 101 Fundamentals of Secure Architecture
• DES 212 Architecture Risk Analysis and Remediation
• DES 311 Creating Secure Application Architecture
• ENG 191-195 Integrating the MS SDL into your SDLC Series (5)
• ENG 211 How to Create Application Security Design Requirements
• ENG 311 Attack Surface Analysis & Reduction
• ENG 312 How to Perform a Security Code Review