An application security workbench for Meridian Retail: an attack-surface map of browser, mobile app, web app, orders API, database and a third-party payments service across two trust boundaries with four marked entry points; an injection fix where a query built by string concatenation returns every order and the parameterised version keeps input as data; and a security program of threat modelling, code review, SAST, dependency scanning, DAST and pen testing that cut critical findings from 14 to 2.

CY-BEGINNER-073Beginner · Application Security

Application Security Field Lab — From Attack Surface to Secure Program

A nine-hour engineering workbench where you map an application's attack surface, neutralize injection, harden authentication and access control, protect data and secrets, control dependencies, build layered testing, and defend a measurable AppSec program.

9 hours8 chapters32 lessons98 activities8 labs

What you'll learn

Map application trust boundaries and stop injection at the interpreter.
Harden authentication, sessions, and object and function authorization.
Protect sensitive data, secrets, and third-party dependencies.
Place the right security testing at each stage and defend an AppSec program.

Price:৳5,000