EC-Council Certified DevSecOps Engineer (ECDE) Training Course

Today, a variety of programming languages are available to compile code for the .NET and ASP.NET frameworks. While this environment offers robust tools for security development, developers must understand how to apply architecture- and coding-level programming techniques to implement desired security functionalities, avoid vulnerabilities, or limit their exploitation.

The aim of this course is to equip developers with the ability to prevent untrusted code from performing privileged actions, protect resources through strong authentication and authorization, facilitate remote procedure calls, manage sessions, and introduce diverse implementations for specific functionalities, among other skills, through numerous hands-on exercises.

The introduction to various vulnerabilities begins by presenting typical programming problems encountered when using .NET. The discussion on ASP.NET vulnerabilities also covers various environment settings and their effects. Finally, the topic of ASP.NET-specific vulnerabilities addresses not only general web application security challenges but also special issues and attack methods, such as attacking the ViewState or employing string termination attacks.

Participants attending this course will

• Understand fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and understand how to avoid them
• Learn to utilise various security features of the .NET development environment
• Gain practical knowledge in using security testing tools
• Learn about typical coding mistakes and how to avoid them
• Gain information about some recent vulnerabilities in .NET and ASP.NET
• Access sources and further readings on secure coding practices

Audience

Developers

The Certified Penetration Testing Professional (CPENT) accreditation is a globally acknowledged endorsement of an individual's expertise and capabilities in penetration testing or ethical hacking. CPENT-accredited professionals prove their competence in identifying, evaluating, and managing security vulnerabilities within network infrastructure. The accreditation involves mastering penetration testing methodologies, grasping legal and regulatory considerations, and possessing technical knowledge of attack vectors and countermeasures. Various industries frequently demand CPENT-accredited professionals to protect their systems from malicious intruders. Consequently, the CPENT accreditation acts as proof of a candidate's expert proficiency in securing networks and systems, which is vital in the ever-changing cybersecurity environment.

In this instructor-led, live course in Botswana, participants will learn how to formulate an appropriate security strategy to address the DevOps security challenge.

This course on Botswana is structured to assist with the following:

1. Enabling developers to master the techniques of writing Secure Code
2. Assisting software testers in evaluating application security prior to deployment in production environments
3. Helping software architects comprehend the risks associated with their applications
4. Guiding team leaders in establishing appropriate security baselines for their developers
5. Supporting web administrators in configuring servers to prevent misconfigurations