EC-COUNCIL Certified Application Security Engineer (.NET)

De training Certified Application Security Engineer (.NET) is speciaal ontwikkeld voor .NET-ontwikkelaars die veilige Windows- en webapplicaties willen ontwerpen en bouwen. Je leert beveiliging toepassen in elke fase van de Software Development Lifecycle (SDLC), van ontwerp tot implementatie en beheer.

Tijdens de training verdiep je je in inputvalidatie, sessiebeheer, encryptie, foutafhandeling, logging en veilige bestandsverwerking. Je leert kwetsbaarheden zoals SQL-injecties, session hijacking en path traversal-aanvallen herkennen én voorkomen. Ook komt veilige configuratie en code review aan bod. Je werkt intensief aan praktijkgerichte labs, waardoor je de technieken direct kunt toepassen in je eigen ontwikkelomgeving.

Onderwerpen zijn onder meer:

• Veilige inputvalidatie en output encoding
• Beveiligd sessie- en authenticatiebeheer
• Cryptografie, hashing en digitale certificaten
• Veilige foutafhandeling en logging
• Best practices voor configuratiebeheer en code review

Deze training is bedoeld voor .NET-ontwikkelaars met ervaring. Het lesmateriaal is Engelstalig en de training wordt gegeven door een Nederlandstalige trainer.The ECSP certification is intended for programmers who are responsible for designing and building secure Windows/Web based applications with .NET Framework. It is designed for developers who have .NET development skills.Students in this course will acquire knowledge in the following areas:

• .Net framework security features and various secure coding principles
• .Net framework run time security model, role-based security, code access security (CAS), and class libraries security
• Various validation controls, mitigation techniques for validation control vulnerabilities, defensive techniques for SQL injection attacks, and output encoding to prevent input validation attacks
• Defensive techniques against session attacks, cookie security, and View State security
• Mitigating vulnerabilities in class level exception handling, managing unhandled errors, and implementing windows log security against various attacks
• Defensive techniques against path traversal attacks and defensive techniques against canonicalization attack and file ACLs
• Mitigating vulnerabilities in machine config files, mitigating the vulnerabilities in app config files, and security code review approaches
• The importance of secure programmers and certified secure programmers, the career path of secure programmers, and the essential skill set of secure programmers

Module 01: Introduction to .NET Application Security

Module 02: .NET Framework Security

Module 03: Input Validation and Output Encoding

Module 04: .NET Authorization and Authentication

Module 05: Secure Session and State Management

Module 06: .NET Cryptography

Module 07: .NET Error Handling, Auditing, and Logging

Module 08: .NET Secure File Handling

Module 09: .NET Configuration Management and Secure Code Review

Number of Questions: 50
Passing Score: 70%
Test Duration: 2 Hours
Test Format: Multiple Choice
Test Delivery: EC-Council Exam Center
Exam Prefix: 312-93