Overview
The Ruby on Rails learning path includes a variety of security courses that will vary depending on whether you are seeking core, advanced or elite paths. This path is designed for those responsible for writing server-side web application logic in Ruby, around the frame rails. It provides best practices and techniques for secure application development, including:
- Understanding various classes of vulnerabilities
- Building strong session management
- Preventing vulnerabilities commonly found in Rails applications
- AWA 101 – Fundamentals of Application Security (UPDATED)
- AWA 102 – Secure Software Concepts
- COD 102 – The Role of Software Security (NEW)
- COD 103 – Creating Software Security Requirements (NEW)
- COD 104 – Designing Secure Software (NEW)
- COD 105 – Secure Software Development (NEW)
- COD 106 – The Importance of Software Integration and Testing (NEW)
- COD 107 – Secure Software Deployment (NEW)
- COD 108 – Software Operations and Maintenance (NEW)
- DES 101 – Fundamentals of Secure Architecture (Updated)
- ENG 205 – Fundamentals of Threat Modeling (Updated)
- COD 251 – Defending AJAX-Enabled Web Applications (NEW)
- COD 255 – Creating Secure Code: Web API Foundations
- COD 256 – Creating Secure Code: Ruby on Rails Foundations (Updated)
- COD 257 – Creating Secure Python Web Applications (Updated)
- COD 259 – Node.js Threats & Vulnerabilities
- COD 281 – Java Security Model
- COD 282 – Java Authentication & Authorization
- COD 283 – Java Cryptography (UPDATED)
- COD 284 – Secure Java Coding (NEW)
- COD 352 – Creating Secure JavaScript and jQuery Code (Updated)
- COD 361 – HTML5 Secure Threats
- COD 362 – HTML5 Built in Security Features
- COD 363- Securing HTML5 Data
- COD 364 – Securing HTML5 Connectivity
- DES 202 – Cryptographic Suite Services: Encoding, Encrypting & Hashing
- DES 203 – Cryptographic Components: Randomness, Algorithms, and Key Management
- DES 204 – Role of Cryptography in Application Development
- DES 205 – Message Integrity Cryptographic Functions
- DES 224 – Applying OWASP 2017: Mitigating Sensitive Data Exposure
- DES 228 – Applying OWASP 2017: Mitigating Cross Site Scripting (XSS)
- TST 224 – Testing for OWASP 2017: Sensitive Data Exposure
- TST 228 – Testing for OWASP 2017: Cross Site Scripting (XSS)
- DES 212 – Architecture Risk Analysis & Remediation (Updated)
- DES 311 – Creating Secure Application Architecture (Updated)
- ENG 191 – Introduction to the Microsoft SDL
- ENG 192- Implementing the Agile Microsoft SDL
- ENG 193 – Implementing the Microsoft SDL Optimization Model
- ENG 194 – Implementing Microsoft SDL Line of Business
- ENG 195 – Implementing the Microsoft SDL Threat Modeling Tool
- ENG 211 – How to Create Application Security Design Requirements (Updated)
- ENG 311 – Attack Surface Analysis & Reduction (Updated)
- ENG 312 – How to Perform a Security Code Review (Updated)
Learning Path Details
Number of Courses: 43
Total Duration: 20 Hours
Total CPE Credits: 23