NIST

ENG 123 – Essential Security Engineering Principles

15 Minutes

0.25 Credits

ENG 124 – Essential Application Protection

15 Minutes

0.25 Credits

ENG 125 – Essential Data Protection

15 Minutes

0.25 Credits

ENG 126 – Essential Security Maintenance Policies

15 Minutes

0.25 Credits

ENG 127 – Essential Media Protection

15 Minutes

0.25 Credits

ENG 151 – Fundamentals of Privacy Protection

20 Minutes

0.40 Credits

ENG 211 – How to Create Application Security Design Requirements

25 Minutes

0.5 Credits

ENG 212 – Implementing Secure Software Operations (UPDATED)

20 Minutes

0.40 Credits

ENG 251 – Risk Management Foundations (UPDATED)

15 Minutes

0.30 Credits

ENG 311 – Attack Surface Analysis & Reduction (UPDATED)

25 Minutes

0.50 Credits

ENG 312 – How to Perform a Security Code Review

25 Minutes

0.50 Credits

ENG 320 – Using Software Composition Analysis (SCA) to Secure Open-Source Components

20 Minutes

0.5 Credits

ENG 351 – Preparing the Risk Management Framework

20 Minutes

0.5 Credits

ENG 352 – Categorizing Systems and Information within the RMF

10 Minutes

0.25 Credits

ENG 353 – Selecting, Implementing and Assessing Controls within the RMF

20 Minutes

0.5 Credits

ENG 354 – Authorizing and Monitoring System Controls within the RMF

20 Minutes

0.5 Credits

ICS 210 – ICS/SCADA Security Essentials

12 Minutes

.25 Credits

ICS 310 – Protecting Information and System Integrity in Industrial Control System Environments

15 Minutes

0.25 Credits

LAB 131 – Identifying Improper Restriction of XML External Entity Reference

5 Minutes

0.25 Credits

LAB 132 – Identifying Exposed Services

5 Minutes

0.25 Credits

LAB 133 – Identifying Exposure of Sensitive Information Through Environmental Variables

5 Minutes

0.25 Credits

LAB 134 – Identifying Plaintext Storage of a Password

5 Minutes

0.25 Credits

LAB 135 – Identifying URL Redirection to Untrusted Site

5 Minutes

0.25 Credits

LAB 136 – Identifying Improper Neutralization of Script in Attributes in a Web Page

5 Minutes

0.25 Credits

LAB 137 – Identifying Improper Authorization

5 Minutes

0.25 Credits

LAB 138 – Identifying Authorization Bypass Through User-Controlled Key

5 Minutes

0.25 Credits

LAB 139 – Identifying Use of a Key Past its Expiration Date

5 Minutes

0.25 Credits

LAB 201 – Defending Java Applications Against Canonicalization

5 Minutes

.1 Credits

LAB 202 – Defending Python Applications Against Canonicalization

5 Minutes

.1 Credits

LAB 203 – Defending C# Applications Against Canonicalization

5 Minutes

.1 Credits

LAB 204 – Defending Node.js Applications Against Canonicalization

5 Minutes

.1 Credits

LAB 205 – Defending Java Applications Against XPath Injection

5 Minutes

.1 Credits

LAB 206 – Defending Python Applications Against XPath Injection

5 Minutes

.1 Credits

LAB 207 – Defending Node.js Applications Against XPath Injection

5 Minutes

.1 Credits

LAB 208 – Defending C# Applications Against XPath Injection

5 Minutes

.1 Credits

LAB 250 – Defending C# Applications Against Parameter Tampering

10 Minutes

0.25 Credits

LAB 251 – Defending C# Applications Against Plaintext Password Storage

10 Minutes

0.25 Credits

LAB 263 – Defending Java Applications Against Sensitive Information in Log Files

10 Minutes

.25 Credits

LAB 264 – Defending Python Applications Against Sensitive Information in Log Files

10 Minutes

.25 Credits

LAB 265 – Defending Node.js Applications Against Sensitive Information in Log Files

10 Minutes

.25 Credits