C|ASE .
NET – Certified Application Security
Engineer
Course Outline
Introduction
The Certified Application Security Engineer (C|ASE) – .NET is a comprehensive training program
focusing on secure application development practices for .NET applications.
Modules
1. Application Security Fundamentals
- Understanding security in the Software Development Life Cycle (SDLC) - Threats and
vulnerabilities in .NET applications - OWASP Top 10 overview
2. Security Requirements Gathering
- Identifying and analyzing security requirements - Integrating security into business requirements
3. Secure Application Design and Architecture
- Secure design principles for .NET - Threat modeling and risk analysis
4. Secure Coding Practices for Input Validation
- Preventing SQL Injection - Cross-site Scripting (XSS) prevention - Data validation techniques in
.NET
5. Secure Coding Practices for Authentication and Authorization
- Secure login mechanisms - Session tokens and claims-based authentication - Role-based access
control
6. Secure Coding Practices for Cryptography
- Encryption and hashing techniques in .NET - Key management best practices - Secure storage of
sensitive data
7. Secure Coding Practices for Session Management
- Session handling in ASP.NET - Mitigating session hijacking and fixation attacks
8. Secure Coding Practices for Error Handling
- Proper exception handling - Avoiding information leakage
9. Static and Dynamic Application Security Testing (SAST & DAST)
- Tools and techniques for testing .NET applications - Secure code review practices
10. Secure Deployment and Maintenance
- Secure configuration of .NET applications - Patch management and monitoring - Secure DevOps
practices
Target Audience
- .NET Developers - Software Engineers - Application Architects - Security Professionals
Key Benefits
- Learn industry best practices for secure coding - Protect applications against common
vulnerabilities - Integrate security into every stage of the SDLC
