Courses
Security+ Course
Application Attacks
Back

Application Attacks

Application Attacks

Course list
About

Module 1 - General Security Concepts

Fundamentals of Security
Security Controls
The CIA Triad
Non-repudiation
AAA
Gap Analysis
Zero Trust
Physical Security
Deception and Disruption
Change Management
Technical Change Management
Public Key Infrastructure
Encrypting Data
Key Exchange
Encryption Technologies
Obfuscation
Hashing and Digital Signatures
Blockchain Technology
Certificates

Module 2 - Threats, Vulnerabilities, and Mitigations

Threat Actors
Common Threat Vectors
Phishing
Impersonation
Watering Hole Attacks
Other Social Engineering Attacks
Memory Injections
Buffer Overflows
Race Conditions
Malicious Updates
Operating System Vulnerabilities
SQL Injection
Cross-site Scripting
Hardware Vulnerabilities
Virtualization Vulnerabilities
Cloud-specific Vulnerabilities
Supply Chain Vulnerabilities
Misconfiguration Vulnerabilities
Mobile Device Vulnerabilities
Zero-day Vulnerabilities
An Overview of Malware
Viruses and Worms
Spyware and Bloatware
Other Malware Types
Physical Attacks
Denial of Service
DNS Attacks
Wireless Attacks
On-path Attacks
Replay Attacks
Malicious Code
Application Attacks
Cryptographic Attacks
Password Attacks
Indicators of Compromise
Segmentation and Access Control
Mitigation Techniques
Hardening Techniques

Module 3 - Security Architecture

Cloud Infrastructures
Network Infrastructure Concepts
Other Infrastructure Concepts
Infrastructure Considerations
Secure Infrastructures
Intrusion Prevention
Network Appliances
Port Security
Firewall Types
Secure Communication
Data Types and Classifications
States of Data
Protecting Data
Resiliency
Capacity Planning
Recovery Testing
Backups
Power Resiliency

Module 4 - Security Operations

Secure Baselines
Hardening Targets
Securing Wireless and Mobile
Wireless Security Settings
Application Security
Asset Management
Vulnerability Scanning
Threat Intelligence
Penetration Testing
Analyzing Vulnerabilities
Vulnerability Remediation
Security Monitoring
Security Tools
Firewalls
Web Filtering
Operating System Security
Secure Protocols
Email Security
Monitoring Data
Endpoint Security
Identity and Access Management
Access Controls
Multifactor Authentication
Password Security
Scripting and Automation
Incident Response
Incident Planning
Digital Forensics
Log Data

Module 5 - Security Program Management and Oversight

Security Policies
Security Standards
Security Procedures
Security Considerations
Data Roles and Responsibilities
Risk Management
Risk Analysis
Risk Management Strategies
Business Impact Analysis
Third-party Risk Assessment
Agreement Types
Compliance
Privacy
Audits and Assessments
Penetration Tests
Security Awareness
User Training
Course list
About

Module 1 - General Security Concepts

Fundamentals of Security
Security Controls
The CIA Triad
Non-repudiation
AAA
Gap Analysis
Zero Trust
Physical Security
Deception and Disruption
Change Management
Technical Change Management
Public Key Infrastructure
Encrypting Data
Key Exchange
Encryption Technologies
Obfuscation
Hashing and Digital Signatures
Blockchain Technology
Certificates

Module 2 - Threats, Vulnerabilities, and Mitigations

Threat Actors
Common Threat Vectors
Phishing
Impersonation
Watering Hole Attacks
Other Social Engineering Attacks
Memory Injections
Buffer Overflows
Race Conditions
Malicious Updates
Operating System Vulnerabilities
SQL Injection
Cross-site Scripting
Hardware Vulnerabilities
Virtualization Vulnerabilities
Cloud-specific Vulnerabilities
Supply Chain Vulnerabilities
Misconfiguration Vulnerabilities
Mobile Device Vulnerabilities
Zero-day Vulnerabilities
An Overview of Malware
Viruses and Worms
Spyware and Bloatware
Other Malware Types
Physical Attacks
Denial of Service
DNS Attacks
Wireless Attacks
On-path Attacks
Replay Attacks
Malicious Code
Application Attacks
Cryptographic Attacks
Password Attacks
Indicators of Compromise
Segmentation and Access Control
Mitigation Techniques
Hardening Techniques

Module 3 - Security Architecture

Cloud Infrastructures
Network Infrastructure Concepts
Other Infrastructure Concepts
Infrastructure Considerations
Secure Infrastructures
Intrusion Prevention
Network Appliances
Port Security
Firewall Types
Secure Communication
Data Types and Classifications
States of Data
Protecting Data
Resiliency
Capacity Planning
Recovery Testing
Backups
Power Resiliency

Module 4 - Security Operations

Secure Baselines
Hardening Targets
Securing Wireless and Mobile
Wireless Security Settings
Application Security
Asset Management
Vulnerability Scanning
Threat Intelligence
Penetration Testing
Analyzing Vulnerabilities
Vulnerability Remediation
Security Monitoring
Security Tools
Firewalls
Web Filtering
Operating System Security
Secure Protocols
Email Security
Monitoring Data
Endpoint Security
Identity and Access Management
Access Controls
Multifactor Authentication
Password Security
Scripting and Automation
Incident Response
Incident Planning
Digital Forensics
Log Data

Module 5 - Security Program Management and Oversight

Security Policies
Security Standards
Security Procedures
Security Considerations
Data Roles and Responsibilities
Risk Management
Risk Analysis
Risk Management Strategies
Business Impact Analysis
Third-party Risk Assessment
Agreement Types
Compliance
Privacy
Audits and Assessments
Penetration Tests
Security Awareness
User Training
Malicious Code
Previous
Cryptographic Attacks
Next
Course Content

Module 1 - General Security Concepts

Fundamentals of Security
Security Controls
The CIA Triad
Non-repudiation
AAA
Gap Analysis
Zero Trust
Physical Security
Deception and Disruption
Change Management
Technical Change Management
Public Key Infrastructure
Encrypting Data
Key Exchange
Encryption Technologies
Obfuscation
Hashing and Digital Signatures
Blockchain Technology
Certificates

Module 2 - Threats, Vulnerabilities, and Mitigations

Threat Actors
Common Threat Vectors
Phishing
Impersonation
Watering Hole Attacks
Other Social Engineering Attacks
Memory Injections
Buffer Overflows
Race Conditions
Malicious Updates
Operating System Vulnerabilities
SQL Injection
Cross-site Scripting
Hardware Vulnerabilities
Virtualization Vulnerabilities
Cloud-specific Vulnerabilities
Supply Chain Vulnerabilities
Misconfiguration Vulnerabilities
Mobile Device Vulnerabilities
Zero-day Vulnerabilities
An Overview of Malware
Viruses and Worms
Spyware and Bloatware
Other Malware Types
Physical Attacks
Denial of Service
DNS Attacks
Wireless Attacks
On-path Attacks
Replay Attacks
Malicious Code
Application Attacks
Cryptographic Attacks
Password Attacks
Indicators of Compromise
Segmentation and Access Control
Mitigation Techniques
Hardening Techniques

Module 3 - Security Architecture

Cloud Infrastructures
Network Infrastructure Concepts
Other Infrastructure Concepts
Infrastructure Considerations
Secure Infrastructures
Intrusion Prevention
Network Appliances
Port Security
Firewall Types
Secure Communication
Data Types and Classifications
States of Data
Protecting Data
Resiliency
Capacity Planning
Recovery Testing
Backups
Power Resiliency

Module 4 - Security Operations

Secure Baselines
Hardening Targets
Securing Wireless and Mobile
Wireless Security Settings
Application Security
Asset Management
Vulnerability Scanning
Threat Intelligence
Penetration Testing
Analyzing Vulnerabilities
Vulnerability Remediation
Security Monitoring
Security Tools
Firewalls
Web Filtering
Operating System Security
Secure Protocols
Email Security
Monitoring Data
Endpoint Security
Identity and Access Management
Access Controls
Multifactor Authentication
Password Security
Scripting and Automation
Incident Response
Incident Planning
Digital Forensics
Log Data

Module 5 - Security Program Management and Oversight

Security Policies
Security Standards
Security Procedures
Security Considerations
Data Roles and Responsibilities
Risk Management
Risk Analysis
Risk Management Strategies
Business Impact Analysis
Third-party Risk Assessment
Agreement Types
Compliance
Privacy
Audits and Assessments
Penetration Tests
Security Awareness
User Training