Toutes nos formations sont désormais disponibles en "Live Virtual classes". Contactez-nous pour plus d’informations : formation@oxiane.luToutes nos formations sont désormais disponibles en "Live Virtual classes". Contactez-nous pour plus d’informations : formation@oxiane.lu

ISTQB : Advanced Level - Security Tester

Accueil » Formations » Factory » ISTQB : Advanced Level – Security Tester

This training is aimed at people directly involved in the design of security tests, their execution and collaboration with the Test Manager.

It has the following objectives:
• Optimize security tests.
• Manage the design and execution of the tests, in line with the activities of the Test Manager
• Perform tests on complex projects.

The Security Tester’s mission is to Plan, perform and evaluate security tests from a variety of perspectives – policy-based, risk-based, standards-based, requirements-based and vulnerabilitybased.

2400 € HT 4 jours ISTQBALS

Programme

The Basis of Security Testing

  • Security Risks. Information Security Policies and Procedures.
  • Security Auditing and its Role in Security Testing.

Security Testing Purposes, Goals and Strategies

  • The Purpose of Security Testing.
  • The Organizational Context.
  • Security Testing Objectives.
  • TheScope and Coverage of Security Testing Objectives.
  • Security Testing Approaches.
  • Improving the Security Testing Practices.

Security Testing Processes

  • Security Test Process Definition.
  • Security Test Planning. Security Test Design.
  • Security Test Execution.
  • Security Test Evaluation.
  • Security Test Maintenance.

Security Testing Throughout the Software Lifecycle

  • Role of Security Testing in a Software Lifecycle.
  • The Role of Security Testing in Requirements.
  • The Role of Security Testing in Design.
  • The Role of Security Testing in Implementation Activities
  • The Role of Security Testing in System and Acceptance Test Activities.
  • The Role of Security Testing in Maintenance.

Testing Security Mechanisms

  • System Hardening.
  • Authentication and Authorization.
  • Encryption.
  • Firewalls and Network Zones.
  • Intrusion Detection.
  • Malware Scanning.
  • Data Obfuscation. Training.

Human Factors in Security Testing

  • Understanding the Attackers.
  • Social Engineering.
  • Security Awareness.

Security Test Evaluation and Reporting

  • Security Test Evaluation.
  • Security Test Reporting.

Security Testing Tools

  • Types and Purposes of Security Testing Tools.
  • Tool Selection.

Standards and Industry Trends

  • Understanding Security Testing Standards.
  • Applying Security Standards.
  • Industry Trends.