Certified Application Security Engineer (CASE) Java E-learning and Exam

The CASE Java program is designed to be a hands-on, comprehensive application security training course that will help software professionals create secure applications. It trains software developers on the critical security skills and knowledge required throughout a typical software development lifecycle (SDLC), focusing on the importance of the implementation of secure methodologies and practices required in today’s insecure operating environment.

Target audience:

Java Developers with a minimum of 2 years of experience and individuals who want to become application security engineers/analysts/testers. Individuals involved in the role of developing, testing, managing or protecting Java based applications.

English knowledge and minimum 2 years' Java developer experience

EC Council is sourcing E-Learning training and certification partners globally for the iLearn Division. iLearn is EC-Council’s Official Training program, where a learner learns through instructor-led self-paced video-based training methodology. Self-paced in that a certification candidate can set its own learning pace by pausing the lectures and returning to their studies as their schedule permits.

THE ADVANTAGE OF iLEARN IS THAT IT HAS:

• Step by step guide from EC Council’s Master trainers who teach virtual lessons through HD video

• Rich content equivalent to our classroom training

• Access iLabs, the virtual simulated lab with more than 140 lab exercises and 2200 hacking tools inbuilt in the system

• A convenient 365-days access our training content on the web

• A cost-effective solution to training without additional time investment.

THE iLEARN PACKAGE INCLUDES:

• One Year Access to the E-courseware

• Six months access to EC-Council's official Online lab environment (iLabs)

• EC-Council’s Certification Exam Voucher (valid for one year)

• One year access to EC-Council's expert instructor-led training modules with streaming video presentations for an all-inclusive training program that provides the benefits of classroom training at your own pace

iLearn online training is a distance learning program designed for those who cannot attend a live course. The program is for the people who have a very busy schedule and want to learn at their own pace through self-study.

KEY OUTCOMES:

• Security Beyond Secure Coding - Challenging the traditional mindset where secure application means secure coding

• Testing and credentialing secure application development across all phases of the SDLC

• CASE Program maps to many Specialty Areas under “Securely Provision category” in the NICE

• 2.0 Framework

• Covers techniques such as Input Validation techniques, Defense Coding Practices, Authentications and Authorizations, Cryptographic Attacks, Error Handling techniques, and Session Management techniques, among many others

COURSE OUTLINE:

1. UNDERSTANDING APPLICATION SECURITY, THREATS, AND ATTACKS

2. SECURITY REQUIREMENTS GATHERING

3. SECURE APPLICATION DESIGN AND ARCHITECTURE

4. SECURE CODING PRACTICES FOR INPUT VALIDATION

5. SECURE CODING PRACTICES FOR AUTHENTICATION AND AUTHORIZATION

6. SECURE CODING PRACTICES FOR CRYPTOGRAPHY

7. SECURE CODING PRACTICES FOR SESSION MANAGEMENT

8. SECURE CODING PRACTICES FOR ERROR HANDLING

9. STATIC AND DYNAMIC APPLICATION SECURITY TESTING (SAST & DAST)

10. SECURE DEPLOYMENT AND MAINTENANCE

Exam Title: Certified Application Security Engineer (Java)

Exam Code: 312-96

Number of Questions: 50

Duration: 2 hours

Availability: ECC Exam Portal

Test Format: Multiple Choice

 The EC-Council group is made up of several entities that all help serve the same goal, which is to create a better, safer cyber-world through awareness and education.