EC-Council Certified DevSecOps Engineer (ECDE) Training Course

Today, developers have access to various programming languages capable of compiling code for the .NET and ASP.NET frameworks. While this environment offers robust tools for security development, it is crucial for developers to understand how to apply architectural and coding-level techniques to implement effective security measures, avoid vulnerabilities, and limit potential exploitation.

This course aims to equip developers with the skills to prevent untrusted code from executing privileged actions through numerous hands-on exercises. Participants will learn to protect resources via strong authentication and authorization, manage remote procedure calls, handle sessions, and explore various implementation strategies for specific functionalities.

The course introduces various vulnerabilities by highlighting typical programming errors made when using .NET. The discussion on ASP.NET vulnerabilities covers the impact of different environment settings. Furthermore, the section on ASP.NET-specific vulnerabilities addresses general web application security challenges alongside specialized issues and attack vectors, such as ViewState attacks and string termination exploits.

Participants attending this course will

• Grasp fundamental concepts of security, IT security, and secure coding principles
• Identify web vulnerabilities beyond the OWASP Top Ten and learn how to mitigate them
• Utilise the various security features available in the .NET development environment
• Acquire practical skills in using security testing tools
• Recognise common coding mistakes and understand how to prevent them
• Gain insights into recent vulnerabilities affecting .NET and ASP.NET
• Access sources and further reading materials on secure coding practices

Audience

Developers

The Certified Penetration Testing Professional (CPENT) certification is an internationally acknowledged credential that validates an individual's expertise and capabilities in penetration testing and ethical hacking. Professionals holding this certification demonstrate their proficiency in identifying, evaluating, and mitigating security vulnerabilities within network infrastructures. The programme covers mastery of penetration testing methodologies, comprehension of legal and regulatory implications, and technical insight into attack vectors and countermeasures. Many industries seek CPENT-certified experts to protect their systems from malicious threats, making this certification a strong endorsement of a candidate's advanced skills in network and system security—a vital asset in the ever-changing cybersecurity arena.

In this instructor-led, live course in South Africa, participants will learn how to formulate the proper security strategy to face the DevOps security challenge.

This course in South Africa focuses on supporting the following objectives:

1. Empowering developers to master secure coding techniques
2. Enabling software testers to verify application security before releasing to production environments
3. Helping software architects understand application-related risks
4. Assisting team leaders in defining security baselines for developers
5. Guiding web masters in server configuration to avoid misconfigurations