CSSLP 2024: Secure Software Testing
CSSLP 2024
| Expert
- 14 videos | 1h 48m 7s
- Includes Assessment
- Earns a Badge
Domain 6 of the CSSLP, Secure Software Testing, contains some of the most stunningly creative topics in the entire curriculum. For example, fuzz testing has been used to uncover not just vulnerabilities, but even obscure undocumented functionality. In this course, you'll learn how to contrast functional and non-functional security testing, white-box and black-box testing, while exploring testing environments in known and unknown configurations. Then, you'll explore security standards and guidelines, including the OWASP Testing Guide, SEI CERT best practices, OSSTMM framework, and NISTIR 8397. Next, you'll learn about vulnerability scanning and penetration testing, including attack surface validation, fuzz testing, simulation testing, and failure testing. You'll analyze the importance of entropy in cryptographic validation, study pseudorandom number generators, and study the role of undocumented functionality in secure development. Finally, you'll distinguish between defects, errors, and vulnerabilities, learn about CVSS scores, and review verification, validation, and acceptance testing techniques to ensure software quality and usability. This course prepares learners for the Certified Secure Software Lifecycle Professional (CSSLP) exam.
WHAT YOU WILL LEARN
-
Discover the key concepts covered in this course
Define and contrast functional and non-functional security testing, as well as white-box and black-box testing
Define testing environment and contrast known and unknown environment testing
Describe the owasp testing guide, sei cert best practices, osstmm framework, nistir 8397 and other resources and standards for security testing
Define attack surface validation, vulnerability scanning and penetration testing
Define and analyze the uses of fuzzing (fuzz testing) and simulation testing
Define failure testing and analyze stress and break testing as well as run-time and compile-time fault injection -
Outline the importance of high-quality and pseudorandom number generators in security and list sources and controls around entropy
Analyze security implications of documentation and undocumented functionality
Define examples of build and break criteria and the impact of security tests on the product roadmap
Distinguish defects, errors and vulnerabilities and analyze the role of cvss scores in addressing them
Contrast the generation of test data using automated tools with the secure reuse of production data in testing
Define and contrast verification and validation testing, and enumerate types of acceptance testing
Summarize the key concepts covered in this course
IN THIS COURSE
-
2m 38sIn this video, you will discover the key concepts covered in this course. FREE ACCESS
-
10m 55sFind out how to define and contrast functional and non-functional security testing, as well as white-box and black-box testing. FREE ACCESS
-
3. Known and Unknown Testing Environments5m 19sDuring this video, you will learn how to define testing environment and contrast known and unknown environment testing. FREE ACCESS
-
4. Standards and Guidelines for Security Testing5m 48sLearn how to describe the OWASP Testing Guide, SEI CERT best practices, OSSTMM framework, NISTIR 8397 and other resources and standards for security testing. FREE ACCESS
-
5. Vulnerability Scanning and Penetration Testing11m 52sAfter completing this video, you will be able to define attack surface validation, vulnerability scanning and penetration testing. FREE ACCESS
-
6. Fuzzing (Fuzz Testing) and Simulation Testing8m 40sIn this video, find out how to define and analyze the uses of fuzzing (fuzz testing) and simulation testing. FREE ACCESS
-
7. Types of Failure Testing5m 48sUpon completion of this video, you will be able to define failure testing and analyze stress and break testing as well as run-time and compile-time fault injection. FREE ACCESS
-
8. Entropy and Cryptographic Validation12m 8sLearn how to outline the importance of high-quality and pseudorandom number generators in security and list sources and controls around entropy. FREE ACCESS
-
9. Documentation and Undocumented Functionality9m 17sDuring this video, you will learn how to Analyze security implications of documentation and undocumented functionality. FREE ACCESS
-
10. Build and Break Criteria8m 32sFind out how to define examples of build and break criteria and the impact of security tests on the product roadmap. FREE ACCESS
-
11. Defects, Errors, Vulnerabilities, and CVSS Scores6m 42sIn this video, find out how to distinguish defects, errors and vulnerabilities and analyze the role of CVSS scores in addressing them. FREE ACCESS
-
12. Considerations in Test Data12m 12sDiscover how to contrast the generation of test data using automated tools with the secure reuse of production data in testing. FREE ACCESS
-
13. Verification, Validation, and Acceptance Testing5m 23sLearn how to define and contrast verification and validation testing, and enumerate types of acceptance testing. FREE ACCESS
-
14. Course Summary2m 54sIn this video, we will summarize the key concepts covered in this course. FREE ACCESS
EARN A DIGITAL BADGE WHEN YOU COMPLETE THIS COURSE
Skillsoft is providing you the opportunity to earn a digital badge upon successful completion on some of our courses, which can be shared on any social network or business platform.
Digital badges are yours to keep, forever.YOU MIGHT ALSO LIKE
Rating 4.6 of 147 users
(147)