CSWAE - Certified Secure Web Application Engineer

Learn how a secure software development lifecycle weaves security into every SDL C phase—from requirements, threat modeling, and design to coding, testing, and production—to reduce cost and protect data.

Explore the OWASP top 10 web vulnerabilities, including injection, broken authentication, and cross-site scripting, and learn input validation, parameterized queries, and secure configuration to mitigate risks.

Identify and analyze risks early, implement risk-based, cost-effective controls, and monitor their effectiveness to protect assets and support business objectives.

Master threat modeling by analyzing security objectives, system architecture, data flows, and dependencies, identifying threats and threat agents with STRIDE and DREAD, and designing controls for attacker perspectives.

Explore how authentication validates a user’s identity and authorization grants access, and analyze common vulnerabilities from passwords and remember-me cookies to two-factor authentication and role-based controls.

Learn how secure session management safeguards web apps with strong tokens, TLS transmission, and logout invalidation while preventing hijacking, fixation, and token theft.

Design secure web architectures from the start with threat modeling, risk analysis, defense in depth, secure by default, data handling, auditing and monitoring.

Learn to validate and sanitize all input, from files to HTTP requests, using white lists, type and format checks, and secure handling to prevent sequel injections and other attacks.

Examine how ajax security powers web 2.0 interactions with asynchronous requests and data formats, identify vulnerabilities such as cross site scripting and cross site request forging, and enforce input-output validation.