This badge was issued to ahmed eissa on 18 May 2017.
Application Security Engineer - Explorer Award for Professionals 2017 - 2019
Issued by
IBM
Through an instructor-led classroom, this badge earner has demonstrated the ability to scan and test web applications for the identification and analysis of vulnerabilities and attacks, using IBM AppScan Standard. This individual has demonstrated an understanding of topics such as OWASP web application security standards, SQL injection flaws, authentication, cross-site scripting, sensitive data exposure, and Glass box scanning.
- Time Months
Skills
- AJAX
- Application Scans
- AXF
- Broken Authentication
- Cross-Site Request Forgery
- Cross-Site Scripting
- Ethical Hacking
- Function-level Access Control
- Glass Box
- HTML
- HTTP
- IBM AppScan Standard
- Injection Flaws
- Insecure Direct Object Reference
- OWASP Classifications
- Scripting
- SDK
- SDLC
- Security Breach
- Security Misconfiguration
- Security Scans
- Security Testing
- Security Vulnerabilities
- Sensitive Data Exposure
- Session Hijacking
- SQL Injection
- Threat Modeling
- Unvalidated Redirects
- Vulnerability Testing
- WASC Classification
- Web2.0
- Web Application Security
- Web Services
Earning Criteria
-
Expected to be either an IBM Customer or Business Partner attending the IBM Skills Academy, or a nominated Information Technology professional working for IBM.
-
Completion of Module I - Cyber Security Overview: Covering Security Overview, Trends, Case Studies; Security standards and frameworks.
-
Completion of Module II - Cyber Security Foundations: Covering Application Security Technologies: - HTML5 and JavaScript Programming - SQL Relational database, objects and tables.
-
Completion of Module III - Application Security Engineer 2017: Covering Web application security threats; OWASP attack classifications; SQL injection attacks; Broken authentication; Cross-site Scripting; Insecure direct object reference; Sensitive data exposure; Cross-site request forgery; Security in the software development lifecycle; Automated security scans and test; Vulnerability testing; Reporting; Scanning sites that use JavaScript and Flash; Glass box; Troubleshooting AppScan.
-
Passing the Application Security Engineer 2017 practice test for "Application Security Engineer 2017".