Web Services

API 210 – Mitigating APIs Lack of Resources & Rate Limiting

15 Minutes

0.25 CPE

API 211 – Mitigating APIs Broken Object Level Authorization

15 Minutes

0.25 CPE

API 213 – Mitigating APIs Mass Assignment

15 Minutes

0.25 CPE

API 214 – Mitigating APIs Improper Asset Management

15 Minutes

0.25 CPE

API 251 – Implementing Web Application and API Protection (WAAP)

35 Minutes

0.75 CPE

COD 141 – Fundamentals of Database Security

30 Minutes

0.5 CPE

COD 160 – Fundamentals of Secure Embedded Software Development

45 Minutes

1 CPE

COD 215 – Mitigating .NET Application Vulnerabilities

25 Minutes

.5 CPE

COD 251 – Defending AJAX-Enabled Web Applications

25 Minutes

.5 CPE

COD 255 – Creating Secure Code: Web API Foundations

20 Minutes

0.5 CPE

COD 257 – Creating Secure Python Web Applications

45 Minutes

1 CPE

COD 258 – Creating Secure PHP Web Applications

30 Minutes

0.5 CPE

COD 268 – Mitigating TypeScript Application Vulnerabilities

30 Minutes

.5 CPE

COD 283 – Java Cryptography (UPDATED)

30 Minutes

0.6 CPE

COD 284 – Secure Java Coding

30 Minutes

.5 CPE

COD 287 – Java Application Server Hardening

20 Minutes

0.5 CPE

COD 288 – Java Public Key Cryptography

20 Minutes

0.5 CPE

COD 308 – Common ASP.NET MVC Vulnerabilities and Attacks

45 Minutes

1 CPE

COD 309 – Securing ASP.NET MVC Applications

20 Minutes

0.4 CPE

COD 310 – Securing ASP.NET Core Applications (NEW)

20 Minutes

0.4 CPE

COD 322 – Protecting C# from SQL Injection

8 Minutes

.25 CPE

COD 323 – Using Encryption with C#

20 Minutes

.5 CPE

COD 324 – Protecting C# from XML Injection

8 Minutes

.25 CPE

COD 325 – Protecting Data in C# for .NET Core (NEW)

30 Minutes

0.6 CPE

COD 361 – HTML5 Secure Threats

15 Minutes

0.25 CPE

COD 362 – HTML5 Built in Security Features

20 Minutes

0.5 CPE

COD 363 – Securing HTML5 Data

20 Minutes

0.5 CPE

COD 364 – Securing HTML5 Connectivity

20 Minutes

0.5 CPE

COD 380 – Preventing SQL Injection in Java

8 Minutes

.25 CPE

COD 381 – Preventing Path Traversal Attacks in Java

8 Minutes

.25 CPE

COD 382 – Protecting Data in Java

30 Minutes

.5 CPE

COD 384 – Protecting Java from Information Disclosure

8 Minutes

.25 CPE

COD 385 – Preventing Race Conditions in Java Code

8 Minutes

.25 CPE

COD 386 – Preventing Integer Overflows in Java Code

8 Minutes

.25 CPE

DES 207 – Mitigating OWASP API Security Top 10

15 Minutes

0.25 CPE

DES 208 – Defending Against the CSA Top 11 Threats to Cloud Computing

15 Minutes

0.25 CPE

DES 210 – Hardening Linux/Unix Systems

30 Minutes

0.5 CPE

DES 216 – Protecting Cloud Infrastructure

40 Minutes

0.75 CPE

DES 232 – Mitigating OWASP 2021 Injection

12 Minutes

0.25 CPE

DES 233 – Mitigating OWASP 2021 Identification and Authentication Failures

12 Minutes

0.25 CPE

DES 234 – Mitigating OWASP 2021 Cryptographic Failures

12 Minutes

0.25 CPE

DES 235 – Mitigating OWASP 2021 Insecure Design

12 Minutes

0.25 CPE

DES 236 – Mitigating OWASP 2021 Broken Access Control

12 Minutes

0.25 CPE

DES 237 – Mitigating OWASP 2021 Security Misconfiguration

12 Minutes

0.25 CPE

DES 238 – Mitigating OWASP 2021 Server-Side Request Forgery (SSRF)

12 Minutes

0.25 CPE

DES 239 – Mitigating OWASP 2021 Software and Data Integrity Failures

12 Minutes

0.25 CPE

DES 240 – Mitigating OWASP 2021 Vulnerable and Outdated Components

12 Minutes

0.25 CPE

DES 241 – Mitigating OWASP 2021 Security Logging and Monitoring Failures

12 Minutes

0.25 CPE

DES 305 – Protecting Existing Blockchain Assets

20 Minutes

0.5 CPE

DES 306 – Creating a Secure Blockchain Network

20 Minutes

0.5 CPE

DSO 205 – Securing the COTS Supply Chain

15 Minutes

0.25 CPE

DSO 253 – DevSecOps in the AWS Cloud

20 Minutes

0.5 CPE

DSO 254 – DevSecOps in the Azure Cloud

20 Minutes

0.5 CPE

ENG 150 – Meeting Confidentiality, Integrity, and Availability

30 Minutes

.5 CPE

ENG 191 – Introduction to the Microsoft SDL

25 Minutes

0.5 CPE

ENG 192 – Implementing the Agile Microsoft SDL

20 Minutes

0.5 CPE

ENG 193 – Implementing the Microsoft SDL Optimization Model

12 Minutes

0.25 CPE

ENG 194 – Implementing Microsoft SDL Line of Business

20 Minutes

0.5 CPE

ENG 195 – Implementing the Microsoft SDL Threat Modeling Tool

20 Minutes

0.5 CPE

ENG 353 – Selecting, Implementing and Assessing Controls within the RMF

20 Minutes

0.5 CPE

ENG 354 – Authorizing and Monitoring System Controls within the RMF

20 Minutes

0.5 CPE

LAB 111 – Identifying Server-Side Request Forgery

5 Minutes

0.25 CPE

LAB 113 – Identifying Cryptographic Failures

5 Minutes

0.25 CPE

LAB 114 – Identifying Cookie Tampering

5 Minutes

0.25 CPE

LAB 115 – Identifying Reflective XSS

5 Minutes

0.25 CPE

LAB 116 – Identifying Forceful Browsing

5 Minutes

0.25 CPE

LAB 117 – Identifying Hidden Form Field

5 Minutes

0.25 CPE

LAB 118 – Identifying Weak File Upload Validation

5 Minutes

0.25 CPE

LAB 119 – Identifying Persistent XSS

5 Minutes

0.25 CPE

LAB 120 – Identifying XML Injection

5 Minutes

0.25 CPE

LAB 121 – Identifying Vulnerable and Outdate Components

5 Minutes

0.25 CPE

LAB 124 – Identifying Horizontal Privilege Escalation

5 Minutes

0.25 CPE

LAB 125 – Identifying Buffer Overflow

5 Minutes

0.25 CPE

LAB 126 – Identifying Information Leakage

5 Minutes

0.25 CPE

LAB 127 – Identifying Security Logging and Monitoring Failures

5 Minutes

0.25 CPE

LAB 128 – Identifying Unverified Password Change

5 Minutes

0.25 CPE

LAB 129 – Identifying Error Message Containing Sensitive Information

5 Minutes

0.25 CPE

LAB 130 – Identifying Generation of Predictable Numbers or Identifiers

5 Minutes

0.25 CPE

LAB 131 – Identifying Improper Restriction of XML External Entity Reference

5 Minutes

0.25 CPE

LAB 132 – Identifying Exposed Services

5 Minutes

0.25 CPE

LAB 133 – Identifying Exposure of Sensitive Information Through Environmental Variables

5 Minutes

0.25 CPE

LAB 134 – Identifying Plaintext Storage of a Password

5 Minutes

0.25 CPE

LAB 135 – Identifying URL Redirection to Untrusted Site

5 Minutes

0.25 CPE

LAB 136 – Identifying Improper Neutralization of Script in Attributes in a Web Page

5 Minutes

0.25 CPE

LAB 137 – Identifying Improper Authorization

5 Minutes

0.25 CPE

LAB 138 – Identifying Authorization Bypass Through User-Controlled Key

5 Minutes

0.25 CPE

LAB 139 – Identifying Use of a Key Past its Expiration Date

5 Minutes

0.25 CPE

LAB 201 – Defending Java Applications Against Canonicalization

5 Minutes

.1 CPE

LAB 202 – Defending Python Applications Against Canonicalization

5 Minutes

.1 CPE

LAB 203 – Defending C# Applications Against Canonicalization

5 Minutes

.1 CPE

LAB 204 – Defending Node.js Applications Against Canonicalization

5 Minutes

.1 CPE

LAB 205 – Defending Java Applications Against XPath Injection

5 Minutes

.1 CPE

LAB 206 – Defending Python Applications Against XPath Injection

5 Minutes

.1 CPE

LAB 207 – Defending Node.js Applications Against XPath Injection

5 Minutes

.1 CPE

LAB 208 – Defending C# Applications Against XPath Injection

5 Minutes

.1 CPE

LAB 211 – Defending Java Applications Against Credentials in Code Medium

10 Minutes

.25 CPE

LAB 212 – Defending Python Applications Against Credentials in Code Medium

10 Minutes

.25 CPE

LAB 213 – Defending Node.js Applications Against Credentials in Code Medium

10 Minutes

.25 CPE

LAB 214 – Defending C# Applications Against Credentials in Code Medium

10 Minutes

.25 CPE

LAB 215 – Defending Java Applications Against Business Logic Error for Input Validation

10 Minutes

.25 CPE