Course Outline
Introduction
Overview of Web Security Testing Guide for government
- The OWASP Testing Project for government
- Tailoring and prioritizing for organizations in the public sector
- Testing principles and techniques for government applications
- Security testing objectives and requirements for government systems
Exploring Various Testing Techniques for Government Systems
- Manual inspections and reviews for government applications
- Threat modeling for government IT environments
- Source code review for government software
- Penetration testing for government systems
- Security test integration and data analysis for government operations
Understanding the OWASP Testing Framework for Government
- Activities from development to deployment in government projects
- Maintenance and operations for government IT systems
- Lifecycle end-to-end testing framework and workflow for government applications
- Penetration testing methodologies for government security
Performing Web Application Security Testing for Government Systems
- Information gathering for government web applications
- Configuration and deployment management testing for government systems
- Identity management testing for government users
- Authentication and authorization testing for government access controls
- Session management testing for government user sessions
- Input validation testing for government web forms
- Testing for error handling in government applications
- Testing for weak cryptography in government communications
- Business logic testing for government workflows
- Client-side testing for government web interfaces
- API testing for government services
Reporting the Testing Assessment and Results for Government
- Introduction section for government stakeholders
- Executive summary for government leadership
- Findings section for government IT teams
- Appendices for additional government reference materials
Getting Involved in the Web Security Testing Guide for Government
- Referencing and linking WSTG scenarios for government use
- Code of conduct for government contributors
- Contribution guide for government participants
- Feature requests and feedback for government improvements
Summary and Conclusion for Government Applications
Requirements
- A comprehensive understanding of the web development lifecycle for government applications.
- Practical experience in developing, securing, and testing web applications for government use.
Audience
- Software Developers for government projects
- Systems Engineers for government initiatives
- IT Architects for government solutions
Testimonials (5)
Multiple examples for each module and great knowledge of the trainer.
Sebastian - BRD
Course - Secure Developer Java (Inc OWASP)
Module3 Applications Attacks and Exploits, XSS, SQL injection Module4 Servers Attacks and Exploits, DOS, BOF
Tshifhiwa - Vodacom
Course - How to Write Secure Code
Real-life examples.
Kristoffer Opdahl - Buypass AS
Course - Web Security with the OWASP Testing Framework
The trainer's subject knowledge was excellent, and the way the sessions were set out so that the audience could follow along with the demonstrations really helped to cement that knowledge, compared to just sitting and listening.
Jack Allan - RSM UK Management Ltd.
Course - Secure Developer .NET (Inc OWASP)
Piotr was very knowledgeable and related security issues to real world examples very well. His preparation was brilliant.
