EC-Council Certified DevSecOps Engineer (ECDE) Training Course

A variety of programming languages are currently available to compile code for the .NET and ASP.NET frameworks. While this environment offers robust tools for security development, developers must understand how to apply architecture- and code-level programming techniques to implement the desired security functionality, thereby avoiding vulnerabilities or limiting their exploitation.

The goal of this course is to equip developers with the skills to prevent untrusted code from executing privileged actions, protect resources through robust authentication and authorisation, facilitate remote procedure calls, manage sessions, and introduce alternative implementations for specific functionality, among other critical areas, through extensive hands-on exercises.

The introduction to various vulnerabilities begins by examining typical programming errors common in .NET usage. The discussion on ASP.NET vulnerabilities also addresses various environment settings and their impacts. Furthermore, the topic of ASP.NET-specific vulnerabilities covers general web application security challenges, as well as special issues and attack methods such as attacking the ViewState or string termination attacks.

Participants attending this course will

• Grasp the fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and understand how to prevent them
• Learn to utilise the various security features of the .NET development environment
• Gain practical knowledge in using security testing tools
• Understand typical coding mistakes and how to avoid them
• Receive information on recent vulnerabilities within .NET and ASP.NET
• Access sources and further reading on secure coding practices

Audience

Developers

In this instructor-led, live course in Australia, participants will learn how to formulate the proper security strategy to face the DevOps security challenge.

This Australia course is designed to assist professionals in the following areas:

1. Enabling developers to acquire and master the techniques required for writing secure code
2. Equipping software testers with the ability to assess application security prior to deployment to production environments
3. Helping software architects comprehend the risks associated with their applications
4. Assisting team leaders in establishing robust security baselines for their development teams
5. Guiding web administrators in configuring servers to prevent misconfigurations