SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
SEC595Cyber Defense
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
Application Security
Provides assessment data and insights in:
- Common Web Application Attacks
- Web Application Architecture Security
- Secure Coding Principles, Practices and Software Development Lifecycle
How to Apply
Common Web Application Attacks
Current, working knowledge of the OWASP Top 10 and mitigation techniques
Web Application Architecture Security
- Knowledge of web application architecture - Familiarity with design considerations relevant to security - Understanding of common design flaws and mitigation
Web Technologies and Services
- Knowledge of REST and RESTful services - Knowledge of AJAX services with JSON and XML
Secure Coding Principles and Software Development Lifecycle
- An understanding of the SDLC and security issues. - Knowledge of security principles and techniques (i.e. input validation, whitelisting, data sanitization, etc...)
Secure Coding Practice
- Identify and mitigate security issues in Java, C, C#, PHP, Python, and SQL
How to Apply
Application Security Domains
The examinee will understand the details of common web application attacks.
Web Application Architecture Security
The examinee will understand web application architecture.
Web Technologies and Services
The examinee will understand web technologies and services including REST, Javascript, and AJAX
Secure Coding Principles and Software Development Lifecycle
The examinee will understand secure coding principles and the software development lifecycle.
Secure Coding Practice
The candidate will understand the practice of secure coding including Input Validation, Session Management, Access Control, and Authentication.
SANS Assessments are delivered through a web-based tool. There are 30 questions and users have 60 minutes to complete the Assessment. Online reports summarize each user’s results in detail. Application Security Assessments are $150 each with a minimum purchase of 25 total assessments.
NOTE: The assessment will contain code samples in many languages including C, PHP, Java, .Net, and SQL. Primary platform aside, SANS believes a person specializing in application security should be able to spot core security flaws in any common language they are likely to encounter.