27.12.2014 Views

Exam 312-92

Exam 312-92

Exam 312-92

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

EC-Council Certified Secure Programmer <strong>Exam</strong> <strong>312</strong>-<strong>92</strong><br />

Product Information Sheet<br />

Course Duration<br />

5 Days (9:00 am – 5:00 pm)<br />

Course Outline:<br />

Module I: Introduction to Secure Coding<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

Software Security Scenario<br />

Secure Coding<br />

Common Security Mistakes<br />

Why Security Mistakes Are Made<br />

Need for Secure Programming<br />

Building Blocks of Software Security<br />

Types of Security Vulnerabilities<br />

Vulnerability Cycle<br />

Types of Attacks<br />

Hackers and Crackers or Attackers<br />

Risk Assessment and Threat Modeling<br />

STRIDE Threat Model<br />

Common Criteria<br />

Security Architecture<br />

Security Principles<br />

Secure Development Checklists:<br />

Use of Privilege<br />

o Data, Configuration, and Temporary Files<br />

o Network Port Use<br />

o Audit Logs<br />

o User-Server Authentication<br />

Summary<br />

Module II: Designing Secure Architecture<br />

<br />

<br />

<br />

Introduction<br />

Secure Architecture<br />

Application Security<br />

Page | 6<br />

ECSP Copyright © by EC-Council<br />

All Rights Reserved. Reproduction is Strictly Prohibited.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!