Overview
This course teaches you how to use IBM Rational AppScan Standard Edition effectively. The course demonstrates how to create web application and web services security scans as well as how to review and prioritize your scan results and create reports.
You also learn how to optimize your scan so that it performs efficiently and accurately, and you learn about advanced techniques to help scan your applications.
This course also introduces the various ways to customize Rational AppScan Standard Edition by using the Rational
AppScan Software Developer Kit (SDK) and eXtensions Framework (AXF).
Prerequisites:
You should have:
Web application security knowledge
Completed Essentials of Web Application Security V2.0 (RT302MY) or Essentials of Web Application Security
V2.0 (RT330MY)
Audience
This basic course is for:
Web security auditors
Web developers and development managers
Quality assurance practitioners
Web testing and quality-assurance specialists
Course Objective
Review the capabilities of Rational AppScan Standard Edition
Describe the potential risks of conducting an automated security scan
Configure and run a security scan
Compare manual and automatic exploration
Describe the process of analyzing scan results and using issue management
Review scan results, filter false positives, prioritize issues and communicate them to your stakeholders
Optimize your scan configuration and use advanced techniques to scan your web applications
Explain scan logs and messages, export a scan log, and troubleshoot scans
Create reports that are based on discovered security issues
Extend the functionality by using the Rational AppScan Standard Edition Software Development Kit (SDK) and eXtensions Framework (AXF)
Troubleshoot Rational AppScan Standard Edition
Course Outline :: RL121MY ::
Course Outline
Rational AppScan Standard Edition overview
Installation and setup
Making the most of your installation
Configuring a scan
Running a scan
Reviewing scan results
Creating reports
Scanning Web 2.0 applications
Complex login and session management
Glass box and malware scanning
Content-based scanning
Optimizing your scan
Scanning web services
Extending Rational AppScan Standard Edition
Troubleshooting Rational AppScan Standard Edition
Programme scope, delivery arrangements and suitability are confirmed during enquiry.