Back to Security Assessment and Testing
6.2 ~45 min
Conduct security control testing
Overview
The core lesson. Know each technique and when to use it: vulnerability assessment vs penetration test (red/blue/purple), log review, synthetic transactions, code review/testing, misuse cases, interface testing, coverage analysis, breach-attack simulation, and compliance checks.
Key topics to master
- Vulnerability assessment; penetration testing (red/blue/purple)
- Log reviews; synthetic transactions/benchmarks
- Code review and testing; misuse case testing
- Coverage and interface testing (UI, network, API)
- Breach attack simulations; compliance checks