(ISC)²

Certified Secure Software Lifecycle Professional (CSSLP)

(CSSLP.AO1) / आईएसबीएन : 978-1-64459-229-8
Lessons
Lab
TestPrep
AI Tutor (ऐड ऑन)
6 समीक्षा
निःशुल्क परीक्षण प्राप्त करें

कौशल जो आपको प्राप्त होंगे

प्रमाणित सुरक्षित सॉफ़्टवेयर जीवनचक्र पेशेवर प्रमाणन सूचना सुरक्षा पेशेवरों के लिए है जो संगठन में नेताओं के रूप में कार्य करते हैं और सॉफ़्टवेयर जीवनचक्र के प्रत्येक चरण में सुरक्षा को शामिल करने में महत्वपूर्ण भूमिका निभाते हैं। CSSLP परीक्षा (ISC)² में साइबर सुरक्षा विशेषज्ञों द्वारा स्थापित सर्वोत्तम प्रथाओं, नीतियों और प्रक्रियाओं का उपयोग करके SDLC में प्रमाणीकरण, प्राधिकरण और ऑडिटिंग के लिए आवश्यक उम्मीदवार के कौशल और ज्ञान को मान्य करती है।
पाठ्यक्रम रूपरेखा डाउनलोड करें

1

Introduction

  • Why Focus on Software Development?
  • The Role of CSSLP
  • How to Use This Course?
  • The Examination
  • CSSLP (2020)
2

General Security Concepts

  • General Security Concepts
  • Security Models
  • Adversaries
  • Lesson Review
3

Risk Management

  • Definitions and Terminology
  • Types of Risk
  • Governance, Risk, and Compliance
  • Risk Management Models
  • Risk Options
  • Lesson Review
4

Security Policies and Regulations

  • Regulations and Compliance
  • Legal Issues
  • Privacy
  • Security Standards
  • Secure Software Architecture
  • Trusted Computing
  • Acquisition
  • Lesson Review
5

Software Development Methodologies

  • Secure Development Lifecycle
  • Secure Development Lifecycle Components
  • Software Development Models
  • Microsoft Security Development Lifecycle
  • Lesson Review
6

Policy Decomposition

  • Confidentiality, Integrity, and Availability Requirements
  • Authentication, Authorization, and Auditing Requirements
  • Internal and External Requirements
  • Lesson Review
7

Data Classification and Categorization

  • Data Classification
  • Data Ownership
  • Labeling
  • Types of Data
  • Data Lifecycle
  • Lesson Review
8

Requirements

  • Functional Requirements
  • Operational Requirements
  • Requirements Traceability Matrix
  • Connecting the Dots
  • Lesson Review
9

Design Processes

  • Attack Surface Evaluation
  • Threat Modeling
  • Control Identification and Prioritization
  • Risk Assessment for Code Reuse
  • Documentation
  • Design and Architecture Technical Review
  • Lesson Review
10

Design Considerations

  • Application of Methods to Address Core Security Concepts
  • Interfaces
  • Lesson Review
11

Securing Commonly Used Architecture

  • Distributed Computing
  • Service-Oriented Architecture
  • Rich Internet Applications
  • Pervasive/Ubiquitous Computing
  • Mobile Applications
  • Integration with Existing Architectures
  • Cloud Architectures
  • Lesson Review
12

Technologies

  • Authentication and Identity Management
  • Credential Management
  • Flow Control (Proxies, Firewalls, Middleware)
  • Logging
  • Data Loss Prevention
  • Virtualization
  • Digital Rights Management
  • Trusted Computing
  • Database Security
  • Programming Language Environment
  • Operating Systems
  • Embedded Systems
  • Lesson Review
13

Common Software Vulnerabilities and Countermeasures

  • CWE/SANS Top 25 Vulnerability Categories
  • OWASP Vulnerability Categories
  • Common Vulnerabilities and Countermeasures
  • Input Validation Failures
  • Common Enumerations
  • Virtualization
  • Embedded Systems
  • Side Channel
  • Social Engineering Attacks
  • Lesson Review
14

Defensive Coding Practices

  • Declarative vs. Programmatic Security
  • Memory Management
  • Error Handling
  • Interface Coding
  • Primary Mitigations
  • Learning from Past Mistakes
  • Lesson Review
15

Secure Software Coding Operations

  • Code Analysis (Static and Dynamic)
  • Code/Peer Review
  • Build Environment
  • Antitampering Techniques
  • Configuration Management: Source Code and Versioning
  • Lesson Review
16

Security Quality Assurance Testing

  • Standards for Software Quality Assurance
  • Testing Methodology
  • Functional Testing
  • Security Testing
  • Environment
  • Bug Tracking
  • Attack Surface Validation
  • Testing Artifacts
  • Test Data Lifecycle Management
  • Lesson Review
17

Security Testing

  • Scanning
  • Penetration Testing
  • Fuzzing
  • Simulation Testing
  • Testing for Failure
  • Cryptographic Validation
  • Regression Testing
  • Impact Assessment and Corrective Action
  • Lesson Review
18

Secure Lifecycle Management

  • Introduction to Acceptance
  • Pre-release Activities
  • Post-release Activities
  • Lesson Review
19

Secure Software Installation and Deployment

  • Secure Software Installation and Its Subsequent Deployment
  • Configuration Management
  • Lesson Review
20

Secure Software Operations and Maintenance

  • Secure Software Operations
  • The Software Maintenance Process
  • Secure DevOps
  • Secure Software Disposal
  • Lesson Review
21

Supply Chain and Software Acquisition

  • Supplier Risk Assessment
  • Supplier Sourcing
  • Software Development and Testing
  • Software Delivery, Operations, and Maintenance
  • Supplier Transitioning
  • Lesson Review

1

General Security Concepts

  • Understanding Security Design Tenets
  • Discussing About Access Control Models
  • Understanding Information Flow Models
2

Risk Management

  • Understanding Annualized Loss Expectancy
3

Security Policies and Regulations

  • Understanding Compliance-Based Assessment Regulations
  • Understanding PII and PHI
  • Understanding National Institute of Standards and Technology
4

Software Development Methodologies

  • Discussing About Software Development Methodologies
  • Understanding Secure Development Lifecycle Components
  • Understanding Software Development Models
5

Policy Decomposition

  • Understanding Access Control Mechanisms
6

Data Classification and Categorization

  • Understanding Data Classification Types
  • Understanding Data Ownership Roles
7

Requirements

  • Understanding Functional Requirements
  • Understanding the Requirements Traceability Matrix
8

Design Processes

  • Understanding Documentation
9

Design Considerations

  • Discussing About Security Design Considerations
10

Securing Commonly Used Architecture

  • Understanding Distributed Computing Terms
  • Understanding the Enterprise Service Bus
  • Understanding Cloud Service Models
11

Technologies

  • Understanding X.509 Digital Certificate Fields
  • Understanding Flow Control Technologies
  • Understanding Syslog
  • Understanding Trusted Computing Elements
12

Common Software Vulnerabilities and Countermeasures

  • Discussing About Software Vulnerabilities and Countermeasures
  • Understanding the Buffer Overflow Attack
13

Defensive Coding Practices

  • Understanding Imperative and Declarative Securities
  • Understanding Memory Management
14

Secure Software Coding Operations

  • Understanding Code Analysis Types
15

Security Quality Assurance Testing

  • Discussing About Security Quality Assurance Testing Methods
  • Understanding Functional Testing Types
  • Understanding Security Testing Types
16

Security Testing

  • अटैक सरफेस एनालाइजर को समझना
  • Understanding Regression Testing
17

Secure Lifecycle Management

  • Understanding Various Forms of Testing
18

Secure Software Installation and Deployment

  • Understanding Bootstrapping
19

Secure Software Operations and Maintenance

  • Understanding Operations/Maintenance Activities
  • Understanding the Software Disposal Process
20

Supply Chain and Software Acquisition

  • Discussing About Supplier Risk Assessment
  • Understanding Service Level Agreements

कोई प्रश्न? FAQ देखें

क्या आपके पास अभी भी अनुत्तरित प्रश्न हैं और आपको संपर्क करने की आवश्यकता है?

हमसे अभी संपर्क करें

599 अमेरिकी डॉलर

मूल्य निर्धारण और कर देश दर देश भिन्न हो सकते हैं।

पियर्सन वीयू

बहु विकल्पीय प्रश्न

उम्मीदवार के पास (ISC)2 CSSLP CBK के आठ डोमेन में से एक या अधिक में कम से कम चार वर्ष का संचयी भुगतान वाला सॉफ्टवेयर डेवलपमेंट लाइफसाइकिल (SDLC) पेशेवर कार्य अनुभव होना आवश्यक है, या CSSLP CBK के आठ डोमेन में से एक या अधिक में तीन वर्ष का संचयी भुगतान वाला SDLC पेशेवर कार्य अनुभव होना आवश्यक है, साथ ही कंप्यूटर विज्ञान, सूचना प्रौद्योगिकी (IT) या संबंधित क्षेत्रों में स्नातक या क्षेत्रीय समकक्ष की चार वर्षीय डिग्री होनी चाहिए।

परीक्षा में 125 प्रश्न होंगे।

180 मिनट

700

पुनः परीक्षा नीति इस प्रकार है:

  • यदि आप पहली बार परीक्षा में उत्तीर्ण नहीं होते हैं, तो आप 30 दिन बाद पुनः परीक्षा दे सकते हैं।
  • यदि आप दूसरी बार भी उत्तीर्ण नहीं होते हैं, तो आप अतिरिक्त 90 दिनों के बाद पुनः परीक्षा दे सकते हैं।
  • यदि आप तीसरी बार भी उत्तीर्ण नहीं होते हैं, तो आप अपनी सबसे हालिया परीक्षा के 180 दिन बाद पुनः परीक्षा दे सकते हैं।

तीन साल

सीएसएसएलपी के बारे में अधिक जानें

Certified Secure Software Lifecycle Professional (CSSLP)

$279.99

अभी खरीदें