SDT 318 – Testing for Insufficiently Protected Credentials

Course Overview

Much of the security we rely upon at some point comes down to the passwords we use to authenticate an application. This course introduces ways to identify and mitigate this security weakness, referenced as CWE-522 by the CWE Top 25.

Topics include:

• Understanding the applicability and impact of this weakness in depth
• Using appropriate security mechanism to protect credentials
• Applying methods of prevention, testing, and mitigation to defend against Insufficiently Protected Credentials