ISTQB Security Tester vizsgafelkészítő
Képzés kód:
Képzés hossza:
Képzés nyelve:
24 tanóra
Magyar
A képzés díja:
229 500 Ft + Áfa
ISTQB Security Tester vizsgafelkészítő - Időpontok és jelentkezés
Első oktatási nap: 2025. augusztus 27., további oktatási napok: 28., 29.
Hétköznap napközbeni (09.00 - 16.30)
Jelentkezési határidő:
2025. augusztus 29.
Képzés nyelve:
Magyar
Tanfolyam díja:
229 500 Ft + Áfa
Kedvezmények:
Első oktatási nap: 2025. december 3., további oktatási napok: 4., 5.
Hétköznap napközbeni (09.00 - 16.30)
Jelentkezési határidő:
2025. november 23.
Képzés nyelve:
Magyar
Tanfolyam díja:
229 500 Ft + Áfa
Kedvezmények:
Zártcsoportos képzésre jelentkezem
Amennyiben munkatársaiddal zárt csoportos képzésen veszel részt és kaptál a tanfolyam időpont kódot, itt tudod leadni jelentkezésedet.
Jelentkezés időpont nélkül
Ha egyik időpont sem felel meg neked, de érdekel a tanfolyam, kérünk, hogy add le jelentkezésedet időpont nélkül! Új időpont felvételekor értesíteni fogunk.
Ezeket a kedvezményeket veheted igénybe jelentkezéskor:
ISTQB törzshallgatóknak
MasterMoms program
Védd meg rendszereidet és alkalmazásaidat a modern kiberfenyegetésekkel szemben! Az ISTQB CT-SEC képzés átfogó ismereteket nyújt a biztonsági tesztelés módszereiről, eszközeiről és legjobb gyakorlatairól, különös tekintettel a sebezhetőségek felismerésére és kezelésére. Készülj fel a nemzetközileg elismert minősítés megszerzésére, és emeld karrieredet új szintre!
Ez a képzés olyan tapasztalt szakembereknek szól, akik a biztonsági tesztelésre kívánnak specializálódni, és ki szeretnék szerezni az ISTQB Certified Tester Security Tester (CT-SEC) tanúsítványt.
Ideális az ISTQB Certified Tester Foundation Level (CTFL) tanúsítvánnyal és legalább három év releváns tapasztalattal rendelkező szoftvertesztelők, minőségbiztosítási szakemberek és fejlesztők számára. Az IT-biztonsági elemzők, penetration teszterek és tanácsadók, akik egy világszerte elismert tanúsítványt keresnek, szintén profitálhatnak belőle.Ha a sebezhetőségek azonosítása vagy a szoftverbiztonság javítása érdekel, akkor ez a képzés az ideális választás számodra.
Tedd meg a következő lépést egy biztonságosabb jövő felé!
- ISTQB Certified Tester Foundation Level minősítés
- Minimum három éves tapasztalat biztonsági tesztelés vagy hasonló témakörben
- Angol nyelvismeret, tekintettel arra, hogy a tananyag és a vizsga is angol nyelvű. (A képzés magyar oktatóval, magyar nyelven történik.)
Tanfolyamunk a biztonsági tesztelés módszertanával, hátterével, megtervezésével, implementálásával, technikáival, mérőszámaival, kockázataival és továbbfejlesztésével foglalkozik.
Fő témakörök:
- A biztonsági tesztelés alapjai: Az információbiztonság alapjai, a kockázatértékelés és az auditálási technikák megismerése.
- Biztonsági tesztelés céljai és stratégiái: A biztonsági tesztelés céljainak, stratégiáinak és szervezeti összefüggéseinek áttekintése.
- Biztonsági tesztelési folyamatok: A tesztelési folyamatok tervezése, végrehajtása és karbantartása gyakorlati szemlélettel.
- Biztonsági tesztelés a szoftver életciklusában: A biztonsági tesztelés szerepe az életciklus különböző szakaszaiban, a tervezéstől a karbantartásig.
- Biztonsági mechanizmusok tesztelése: Kulcsfontosságú mechanizmusok, például tűzfalak és titkosítás tesztelésének alapjai.
- Emberi tényezők a biztonsági tesztelésben: A támadók motivációinak és a szociális manipulációs technikák hatásának feltárása.
- Teszteredmények értékelése és jelentése: A teszteredmények értékelésének és hatékony jelentésének módszerei.
- Biztonsági tesztelési eszközök: Eszközök típusai, kiválasztási szempontjai és alkalmazásuk a gyakorlatban.
- Szabványok és iparági trendek: A biztonsági szabványok használata és az aktuális trendek követése.
Oktatóközpontunk Magyarországon elsőként szerezte meg az ISTQB hivatalos vizsgafelkészítői minősítését. Ez lehetővé teszi, hogy ezen a tanfolyamon az ISTQB által akkreditált tananyagból sajátítsd el a biztonsági tesztelés hátterét és készülj fel a vizsgára. A vizsgakérdések mellett nagy hangsúlyt kapnak a gyakorlatok, ahol a biztonsági tesztelés egyes fázisaival kapcsolatos feladatokat oldunk meg. A képzés gyártó- és eszközfüggetlen. Számítógépes gyakorlatokat nem végzünk.
A képzés a Szegedi Tudományegyetemmel együttműködésben valósul meg.
RÉSZLETES TEMATIKA:
1. THE BASIS OF SECURITY TESTING
1.1 Security Risks
1.1.1 The Role of Risk Assessment in Security Testing
1.1.2 Asset Identification
1.1.3 Analysis of Risk Assessment Techniques
1.2 Information Security Policies and Procedures
1.2.1 Understanding Security Policies and Procedures
1.2.2 Analysis of Security Policies and Procedures
1.3 Security Auditing and Its Role in Security Testing
1.3.1 Purpose of a Security Audit
1.3.2 Risk Identification, Assessment and Mitigation
1.3.3 People, Process and Technology
2. SECURITY TESTING PURPOSES, GOALS AND STRATEGIES
2.1 Introduction
2.2 The Purpose of Security Testing
2.3 The Organizational Context
2.4 Security Testing Objectives
2.4.1 The Alignment of Security Testing Goals
2.4.2 Identification of Security Test Objectives
2.4.3 The Difference Between Information Assurance and Security Testing
2.5 The Scope and Coverage of Security Testing Objectives
2.6 Security Testing Approaches
2.6.1 Analysis of Security Test Approaches
2.6.2 Analysis of Failures in Security Test Approaches
2.6.3 Stakeholder Identification
2.7 Improving the Security Testing Practices
3. SECURITY TESTING PROCESSES
3.1 Security Test Process Definition
3.1.1 ISTQB Security Testing Process
3.1.2 Aligning the Security Testing Process to a Particular Application Lifecycle Model
3.2 Security Test Planning
3.2.1 Security Test Planning Objectives
3.2.2 Key Security Test Plan Elements
3.3 Security Test Design
3.3.1 Security Test Design
3.3.2 Security Test Design Based on Policies and Procedures
3.4 Security Test Execution
3.4.1 Key Elements and Characteristics of an Effective Security Test Environment
3.4.2 The Importance Of Planning and Approvals in Security Testing
3.5 Security Test Evaluation
3.6 Security Test Maintenance
4. SECURITY TESTING THROUGHOUT THE SOFTWARE LIFECYCLE
4.1 The Role of Security Testing in a Software Lifecycle
4.1.1 The Lifecycle View of Security Testing
4.1.2 Security-Related Activities in the Software Lifecycle
4.2 The Role of Security Testing in Requirements
4.3 The Role of Security Testing in Design
4.4 The Role of Security Testing in Implementation Activities
4.4.1 Security Testing During Component Testing
4.4.2 Security Test Design at the Component Level
4.4.3 Analysis of Security Tests at the Component Level
4.4.4 Security Testing During Component Integration Testing
4.4.5 Security Test Design at the Component Integration Level
4.5 The Role of Security Testing in System and Acceptance Test Activities
4.5.1 The Role of Security Testing in System Testing
4.5.2 The Role of Security Testing in Acceptance Testing
4.6 The Role of Security Testing in Maintenance
5. TESTING SECURITY MECHANISMS
5.1 System Hardening
5.1.1 Understanding System Hardening
5.1.2 Testing the Effectiveness of System Hardening Mechanisms
5.2 Authentication and Authorization
5.2.1 The Relationship Between Authentication and Authorization
5.2.2 Testing the Effectiveness of Authentication and Authorization Mechanisms
5.3 Encryption
5.3.1 Understanding Encryption
5.3.2 Testing the Effectiveness of Common Encryption Mechanisms
5.4 Firewalls and Network Zones
5.4.1 Understanding Firewalls
5.4.2 Testing Firewall Effectiveness
5.5 Intrusion Detection
5.5.1 Understanding Intrusion Detection Tools
5.5.2 Testing the Effectiveness of Intrusion Detection Tools
5.6 Malware Scanning
5.6.1 Understanding Malware Scanning Tools
5.6.2 Testing the Effectiveness of Malware Scanning Tools
5.7 Data Obfuscation
5.7.1 Understanding Data Obfuscation
5.7.2 Testing the Effectiveness of Data Obfuscation Approaches
5.8 Training
5.8.1 The Importance of Security Training
5.8.2 How to Test the Effectiveness of Security Training
6. HUMAN FACTORS IN SECURITY TESTING
6.1 Understanding the Attackers
6.1.1 The Impact of Human Behavior on Security Risks
6.1.2 Understanding the Attacker Mentality
6.1.3 Common Motivations and Sources of Computer System Attacks
6.1.4 Understanding Attack Scenarios and Motivations
6.2 Social Engineering
6.3 Security Awareness
6.3.1 The Importance Of Security Awareness
6.3.2 Increasing Security Awareness
7. SECURITY TEST EVALUATION AND REPORTING
7.1 Security Test Evaluation
7.2 Security Test Reporting
7.2.1 Confidentiality of Security Test Results
7.2.2 Creating Proper Controls and Data Gathering Mechanisms for Reporting Security Test Status
7.2.3 Analyzing Interim Security Test Status Reports
8. SECURITY TESTING TOOLS
8.1 Types and Purposes of Security Testing Tools
8.2 Tool Selection
8.2.1 Analyzing and Documenting Security Testing Needs
8.2.2 Issues with Open Source Tools
8.2.3 Evaluating a Tool Vendor’s Capabilities
9. STANDARDS AND INDUSTRY TRENDS
9.1 Understanding Security Testing Standards
9.1.1 The Benefits of Using Security Testing Standards
9.1.2 Applicability of Standards in Regulatory Versus Contractual Situations
9.1.3 Selection of Security Standards
9.2 Applying Security Standards
9.3 Industry Trends
9.3.1 Where to Learn of Industry Trends in Information Security
9.3.2 Evaluating Security Testing Practices for Improvements
ISTQB Security Tester vizsgafelkészítő - Mentoraid lesznek
A Szegedi Tudományegyetem Szoftverfejlesztés Tanszékének adjunktusa. Az oktatói munkája mellett aktív a kutatói életben is, számos szoftverfejlesztéssel és szoftverteszteléssel kapcsolatos kutatása jelent meg angol nyelven.
Fő kompetencia területei: Információ biztonság, programozás, követelmény-menedzsment, szoftvertesztelés
Kérdésed van a tréninggel kapcsolatban?
ALAPOZÓ TRÉNINGEK EHHEZ A KÉPZÉSHEZ
Még nincs elegendő tudásod a kurzus elvégzéséhez? Akkor ezekkel a képzésekkel szerezheted meg a szükséges alapokat.
ISTQB Certified Tester Foundation Level vizsgafelkészítő e-learning
(MFCTFLE)
Ár:
99 500 Ft + Áfa
This hands-on course provides test engineers and test managers with the essential ideas, processes, tools and skills they need in order to set themselves on a path for true testing professionalism.
Course is accredited by the ASTQB in 2024 and follows the ISTQB Foundation Level Syllabus - CTFL 4.0.
Ezek a tanfolyamok és e-learningek is érdekelhetnek
Tekintsd meg néhány további képzésünket a témában
ISTQB Advanced Level Test Manager vizsgafelkészítő e-learning
(MFCTALTME)
Ár:
119 500 Ft + Áfa
This course provides test managers with advanced skills in test estimation, test planning, test monitoring and test control. Learn how to define overall testing goals and strategy for the systems under test. You’ll gain hands-on experience in planning, scheduling, and tracking testing tasks effectively. Organize and describe necessary activities while ensuring the right resources are selected, acquired, and assigned. Develop the skills to form, structure, and lead testing teams, facilitating clear communication within the team and with other stakeholders. Additionally, you’ll learn to justify your decisions and provide clear, actionable reporting when needed.
ISTQB Advanced Level Test Analyst vizsgafelkészítő e-learning
(MFCTALTAE)
Ár:
119 500 Ft + Áfa
This hands-on course provides Test Analysts with the ability to define and carry out the tasks required to put the test strategy into action. The course will teach you how to analyze the system, taking into account the organization’s and user’s quality expectations. You will learn how to evaluate system requirements as part of formal and informal reviews, leveraging your understanding of the business domain to determine requirement validity. As well as how to analyze, design, implement, and execute tests, using risk considerations to determine the appropriate effort and priority for tests. Attendees will learn how to implement a testing effort that supports the explicit and implicit testing objectives.
ISTQB Advanced Level Technical Test Analyst vizsgafelkészítő e-learning
(MFCTALTTAE)
Ár:
119 500 Ft + Áfa
Develop the skills to manage and lead software testing effectively. This e-learning presents a comprehensive overview of methods and techniques for deriving and specifying software tests based on the system’s implementation and structure (“white box tests”). On completing the course, attendees will be able to select and apply techniques for test case derivation, such as control flow or data flow testing as well as static and dynamic analysis. We will look at non-functional testing techniques, such as reliability testing, portability testing, performance, load and stress testing. We will also discuss how to succeed in building robust automation architectures and using a variety of tools to reach quality targets.
EC-Council Certified Chief Information Security Officer (CCISO) E-learning and Exam
(MFCCISO)
Ár:
499 500 Ft + Áfa
The CCISO certification is an industry-leading program that recognises the real-world experience necessary to succeed at the highest executive levels of information security. Bringing together all the components required for C-Level positions, the CCISO program combines audit management, governance, IS controls, human capital management, strategic program development and the financial expertise vital for leading a highly successful IS program. The CCISO Training Program can be the key to a successful transition to the highest ranks of information security management.
EC-Council Certified Secure Computer User v2 (CSCU) E-learning and Exam
(MFCSCU)
Ár:
79 500 Ft + Áfa
The CSCU training program aims at equipping students with the necessary knowledge and skills to protect their information assets. This course covers the fundamentals of various computer and network security threats, such as identity theft, credit card fraud, phishing, virus and backdoors, email hoaxes, loss of confidential information, hacking attacks and social engineering.
EC-Council Certified Network Defender (CND) E-learning and Exam
(MFCND)
Ár:
429 500 Ft + Áfa
The Certified Network Defender v3 (CND) credential is the most trusted network security certification that employers worldwide value and for good reasons. The comprehensive curriculum focuses on loT security, network virtualization practices for the remote workforce, enhanced cloud security, loT and operational technology (OT) modules, introduction to threat intelligence, in-depth attack surface analysis, and much more.
EC-Council Certified Ethical Hacker (CEH) v13 AI E-learning and Exam
(MFCEHE)
Ár:
499 500 Ft + Áfa
This accredited course provides the advanced hacking tools and techniques used by hackers and information security professionals.
Introducing CEH v13, the ethical hacking course that redefines cybersecurity training in . Developed by the creators of Certified Ethical Hacker, this latest version integrates advanced AI capabilities. With 20 comprehensive modules and over 550 attack techniques, CEH v13 equips you with the essential skills to excel in cybersecurity.
EC-Council Computer Hacking Forensic Investigator (CHFI) E-learning and Exam
(MFCHFI)
Ár:
429 500 Ft + Áfa
CHFI v10 captures all the essentials of digital forensics analysis and evaluation required for the modern world — tested and approved by veterans and top practitioners of the cyber forensics industry. From identifying the footprints of a breach to collecting evidence for a prosecution, CHFI v10 handholds students through every step of the process with experiential learning. CHFI v10 is engineered by industry practitioners for professionals including those such as forensic analysts, cybercrime investigator, cyber defense forensic analyst, incident responders, information technology auditor, malware analyst, security consultant, chief security officers and aspirants alike.
EC-Council Disaster Recovery Professional (EDRP) E-learning and Exam
(MFEDRP)
Ár:
429 500 Ft + Áfa
The EDRP v3 course identifies vulnerabilities and takes appropriate countermeasures to prevent and mitigate failure risks for an orginization. It also provides the networking professional with a foundation in disaster recovery course principles, including preparation of a disaster recovery plan, assessment of risks in the enterprise, development of policies and procedures, an understanding of the roles and relationships of various members of organisation, implementation of a plan and recovering from a disaster.
EC-Council Certified Incident Handler v2 (ECIH) E-learning and Exam
(MFECIH)
Ár:
229 500 Ft + Áfa
The ECIH program is designed to provide the fundamental skills to handle and respond to the computer security incidents in an information system. The course addresses various underlying principles and techniques for detecting and responding to current and emerging computer security threats. The comprehensive training program will make students proficient in handling as well as responding to various security incidents, such as network security incidents, malicious code incidents and insider attack threats.
Certified Application Security Engineer (CASE).NET E-learning and Exam
(MFCASENET)
Ár:
229 500 Ft + Áfa
CASE .NET goes beyond just the guidelines on secure coding practices but include secure requirement gathering, robust application design and handling security issues in post development phases of application development. This makes CASE one of the most comprehensive certifications for secure software development in the market today. It’s desired by software application engineers, analysts, testers globally and respected by hiring authorities. The hands-on training program encompasses security activities involved in all phases of the Secure Software Development Lifecycle (SDLC): planning, creating, testing and deploying an application.
Certified Application Security Engineer (CASE) Java E-learning and Exam
(MFCASEJAVA)
Ár:
229 500 Ft + Áfa
The CASE Java program is designed to be a hands-on, comprehensive application security training course that will help software professionals create secure applications. It trains software developers on the critical security skills and knowledge required throughout a typical software development lifecycle (SDLC), focusing on the importance of the implementation of secure methodologies and practices required in today’s insecure operating environment.
Certified Threat Intelligence Analyst (C|TIA) E-learning and Exam
(MFCTIAE)
Ár:
229 500 Ft + Áfa
The Threat Intelligence training program was based on a rigorous Job Task Analysis (JTA) of the job roles involved in the field of threat intelligence. This program differentiates threat intelligence professionals from other information security professionals. It is a highly interactive, comprehensive, standards-based, intensive 3-day training program that teaches information security professionals to build professional threat intelligence.
Certified Blockchain Professional (C|BP) E-learning and exam
(MFCBPE)
Ár:
429 500 Ft + Áfa
The Certified Blockchain Professional is fully vendor-agnostic and practical, focusing on the current state of blockchain technology as well as its future potential. The Certified Blockchain Professional course digs deep into the main characteristics and features of the distributed ledger technology (DLT) as well as introduces Blockchain’s new 3S (Secure-Scalable-Sustainable) proprietary framework. Students will also get a deep understanding of blockchain technology and mining of cryptocurrency.
EC-Council Certified SOC Analyst E-learning and Exam
(MFCSAE)
Ár:
279 500 Ft + Áfa
The Certified SOC Analyst (CSA) program is the first step to joining a security operations center (SOC). It is engineered for current and aspiring Tier I and Tier II SOC analysts to achieve proficiency in performing entry-level and intermediate-level operations.
CSA is a training and credentialing program that helps the candidate acquire trending and in-demand technical skills through instruction by some of the most experienced trainers in the industry. The program focuses on creating new career opportunities through extensive, meticulous knowledge with enhanced level capabilities for dynamically contributing to a SOC team. Being an intense 3-day program, it thoroughly covers the fundamentals of SOC operations, before relaying the knowledge of log management and correlation, SIEM deployment, advanced incident detection, and incident response. Additionally, the candidate will learn to manage various SOC processes and collaborate with CSIRT at the time of need.
5* kiváló oktató, aki abszolút gyakorlatorientált.
Excel haladó résztvevő