Certified Secure Software Lifecycle Professional (CSSLP)
(CSSLP.AO1)
/ ISBN: 978-1-64459-229-8
This course includes
Lessons
TestPrep
Lab
Mentoring (Add-on)
Certified Secure Software Lifecycle Professional (CSSLP)
Pass the (ISC)² CSSLP exam with the Certified Secure Software Lifecycle Professional (CSSLP) course and lab. The lab can be mapped to any course, textbook, or training, therefore, adding value and a hands-on component to training. The CSSLP training guide provides skills for the CSSLP exam topics and expertise in the areas such as security design principles, threat modeling, secure interface design, architectural risk assessment, code for security risks, dynamic application security testing (DAST), and many more.
The Certified Secure Software Lifecycle Professional certification is for information security professionals who act as leaders in the organization and play a key role in incorporating security into each phase of the software lifecycle. The CSSLP exam validates a candidate's skills and knowledge necessary for authentication, authorization, and auditing throughout the SDLC using best practices, policies, and procedures established by the cybersecurity experts at (ISC)².
Lessons
-
21+ Lessons
-
299+ Quizzes
-
236+ Flashcards
-
236+ Glossary of terms
TestPrep
-
100+ Pre Assessment Questions
-
2+ Full Length Tests
-
100+ Post Assessment Questions
-
200+ Practice Test Questions
Lab
-
40+ Performance lab
- Why Focus on Software Development?
- The Role of CSSLP
- How to Use This Course?
- The Examination
- CSSLP (2020)
- General Security Concepts
- Security Models
- Adversaries
- Lesson Review
- Definitions and Terminology
- Types of Risk
- Governance, Risk, and Compliance
- Risk Management Models
- Risk Options
- Lesson Review
- Regulations and Compliance
- Legal Issues
- Privacy
- Security Standards
- Secure Software Architecture
- Trusted Computing
- Acquisition
- Lesson Review
- Secure Development Lifecycle
- Secure Development Lifecycle Components
- Software Development Models
- Microsoft Security Development Lifecycle
- Lesson Review
- Confidentiality, Integrity, and Availability Requirements
- Authentication, Authorization, and Auditing Requirements
- Internal and External Requirements
- Lesson Review
- Data Classification
- Data Ownership
- Labeling
- Types of Data
- Data Lifecycle
- Lesson Review
- Functional Requirements
- Operational Requirements
- Requirements Traceability Matrix
- Connecting the Dots
- Lesson Review
- Attack Surface Evaluation
- Threat Modeling
- Control Identification and Prioritization
- Risk Assessment for Code Reuse
- Documentation
- Design and Architecture Technical Review
- Lesson Review
- Application of Methods to Address Core Security Concepts
- Interfaces
- Lesson Review
- Distributed Computing
- Service-Oriented Architecture
- Rich Internet Applications
- Pervasive/Ubiquitous Computing
- Mobile Applications
- Integration with Existing Architectures
- Cloud Architectures
- Lesson Review
- Authentication and Identity Management
- Credential Management
- Flow Control (Proxies, Firewalls, Middleware)
- Logging
- Data Loss Prevention
- Virtualization
- Digital Rights Management
- Trusted Computing
- Database Security
- Programming Language Environment
- Operating Systems
- Embedded Systems
- Lesson Review
- CWE/SANS Top 25 Vulnerability Categories
- OWASP Vulnerability Categories
- Common Vulnerabilities and Countermeasures
- Input Validation Failures
- Common Enumerations
- Virtualization
- Embedded Systems
- Side Channel
- Social Engineering Attacks
- Lesson Review
- Declarative vs. Programmatic Security
- Memory Management
- Error Handling
- Interface Coding
- Primary Mitigations
- Learning from Past Mistakes
- Lesson Review
- Code Analysis (Static and Dynamic)
- Code/Peer Review
- Build Environment
- Antitampering Techniques
- Configuration Management: Source Code and Versioning
- Lesson Review
- Standards for Software Quality Assurance
- Testing Methodology
- Functional Testing
- Security Testing
- Environment
- Bug Tracking
- Attack Surface Validation
- Testing Artifacts
- Test Data Lifecycle Management
- Lesson Review
- Scanning
- Penetration Testing
- Fuzzing
- Simulation Testing
- Testing for Failure
- Cryptographic Validation
- Regression Testing
- Impact Assessment and Corrective Action
- Lesson Review
- Introduction to Acceptance
- Pre-release Activities
- Post-release Activities
- Lesson Review
- Secure Software Installation and Its Subsequent Deployment
- Configuration Management
- Lesson Review
- Secure Software Operations
- The Software Maintenance Process
- Secure DevOps
- Secure Software Disposal
- Lesson Review
- Supplier Risk Assessment
- Supplier Sourcing
- Software Development and Testing
- Software Delivery, Operations, and Maintenance
- Supplier Transitioning
- Lesson Review
Hands on Activities (Performance Labs)
- Understanding Security Design Tenets
- Discussing About Access Control Models
- Understanding Information Flow Models
- Understanding Annualized Loss Expectancy
- Understanding Compliance-Based Assessment Regulations
- Understanding PII and PHI
- Understanding National Institute of Standards and Technology
- Discussing About Software Development Methodologies
- Understanding Secure Development Lifecycle Components
- Understanding Software Development Models
- Understanding Access Control Mechanisms
- Understanding Data Classification Types
- Understanding Data Ownership Roles
- Understanding Functional Requirements
- Understanding the Requirements Traceability Matrix
- Understanding Documentation
- Discussing About Security Design Considerations
- Understanding Distributed Computing Terms
- Understanding the Enterprise Service Bus
- Understanding Cloud Service Models
- Understanding X.509 Digital Certificate Fields
- Understanding Flow Control Technologies
- Understanding Syslog
- Understanding Trusted Computing Elements
- Discussing About Software Vulnerabilities and Countermeasures
- Understanding the Buffer Overflow Attack
- Understanding Imperative and Declarative Securities
- Understanding Memory Management
- Understanding Code Analysis Types
- Discussing About Security Quality Assurance Testing Methods
- Understanding Functional Testing Types
- Understanding Security Testing Types
- Understanding the Attack Surface Analyzer
- Understanding Regression Testing
- Understanding Various Forms of Testing
- Understanding Bootstrapping
- Understanding Operations/Maintenance Activities
- Understanding the Software Disposal Process
- Discussing About Supplier Risk Assessment
- Understanding Service Level Agreements
| What is the exam registration fee? | USD 599 |
|---|---|
| Where do I take the exam? | Pearson VUE |
| What is the format of the exam? | Multiple choice questions |
| What are the pre-requisites of the exam? | A candidate is required to have a minimum of four years of cumulative paid Software Development Lifecycle (SDLC) professional work experience in one or more of the eight domains of the (ISC)2 CSSLP CBK, or three years of cumulative paid SDLC professional work experience in one or more of the eight domains of the CSSLP CBK with a four-year degree leading to a Baccalaureate, or regional equivalent in Computer Science, Information Technology (IT) or related fields. |
| How many questions are asked in the exam? | The exam contains 125 questions. |
| What is the duration of the exam? | 180 minutes |
| What is the passing score? | 700 |
| What is the exam's retake policy? | Here is the retake policy:
|
| What is the validity of the certification? | Three years |
| Where can I find more information about this exam? | Know more about the CSSLP |
| What are the career opportunities after passing this exam? |
|
×
