SDT 317 – Testing for Improper Control of Generation of Code (NEW)

COURSE OVERVIEW When user input can inuence dynamically generated code to inuence program ow or execute arbitrary code the attack is often referred to as code injection. This course introduces ways to identify and mitigate this security weakness, referenced as CWE-94 by the 2020 CWE Top 25 Topics include: Recognizing the impact of this vulnerability Understanding various forms of this attack and their similarities Techniques for nding Hard-Coded credentials in source code Application of mitigation techniques for limiting the impact Leveraging various tools used to test for code injection vulnerabilities Course Duration : 10 mins