Baseline training that arranges security risks and best practices in the AppSec domains, with specific vulnerability emphasis on those enumerated in the OWASP Top 10 and the PCI DSS.

Topics include:

• Attacks using parameter tampering and client validation bypassing
• Exploiting session management and authentication flaws
• SQL and operating system command injections

Covering multiple approaches for evaluating security threats, utilizing comprehensive threat models of example systems inspired by real-world enterprises.

Takeaways include how to:

• Identify abuse cases for example systems
• Draw data flows and identify system threats from those flows
• Pinpoint risks in functional security

Real-world scenarios to help you devise solutions to bring software risk under control and build an AppSec program.

Topics include:

• Root causes, impacts, and costs of application breaches
• Creating a software security assurance program
• Myriad regulatory regimes and standards impacting your organization