Duration
2 days
Course Description
PLEASE NOTE: This course is also available as an Instructor-Led Online class: Essentials of IBM Rational AppScan Standard Edition, V8.0 (YL120)
This course teaches you how to use IBM Rational AppScan Standard Edition effectively. The course demonstrates how to create Web application and Web services security scans as well as how to review and prioritize your scan results and create reports. You will also learn how to optimize your scan so that it performs efficiently and accurately, and you will learn some advanced techniques to help scan your applications. It also introduces the various ways to customize AppScan by using the AppScan SDK and eXtensions Framework (AXF).
Special note
IBM Education Advantage Program Eligibility:
- Yes - Education Pack - online account
Audience
This intermediate course is for Web developers, Web development managers Quality assurance and testing specialists and Security auditors.
Prerequisites
You should have:
- Web application security knowledge
Skills taught
- Scan Web applications for security issues using AppScan Standard Edition
- Scan Web services for security issues using AppScan Standard Edition
- Review scan results, filter false positives, prioritize issues and communicate them to stakeholders
- Create reports based on discovered security issues
- Optimize scan configuration and use advanced techniques to scan Web applications
- Understand how to extend AppScan's functionality using the AppScan SDK and AppScan eXtensions framework
- Troubleshoot AppScan Standard Edition
Course Outline
- Rational AppScan Standard Edition overview
- Installation and setup
- Making the most of your installation
- Configuring a scan
- Running a scan
- Reviewing scan results
- Creating reports
- Scanning Web 2.0 applications
- Complex login and session management
- Malware
- Content-based and widget scanning
- Optimizing your scan
- Scanning Web services
- Extending Rational AppScan Standard Edition
- Troubleshooting Rational AppScan Standard Edition
Programme scope, delivery arrangements and suitability are confirmed during enquiry.