Penetration Testing is an important activity and ability to do the penetration testing effectively should not be limited to few senior security professional in an organization.

In our presentation , we will bring the systematic Engineering approach to Penetration Testing , such that it is not left for a chance.

We will touch upon the Security Principles and Threat modeling which are foundation for a secure product

Also we will present a success case of the application of this Engineering practice in our organization 

High level topics list that will be discussed are as below.

  • Introduction

  • Principles of Security for Secure Products

  • Security in Product Development Life Cycle

  • Threat Modelling

  • Secure Coding

  • Penetration Test Engineering analysis 

  • Cyber Security- a mindset and some anti-patterns

  • Conclusion

 
 

Outline/Structure of the Experience Report

  • Introduction

  • Principles of Security for Secure Products

  • Security in Product Development Life Cycle

  • Threat Modelling

  • Secure Coding

  • Penetration Test Engineering analysis 

  • Cyber Security- a mindset and some anti-patterns

  • Conclusion

Learning Outcome

Key Learning / Take away

  • Understanding on Principles of Security , Threat modeling and how to perform it.

  • How to apply Penetration Test Engineering analysis and derive effective Security Test scenarios

  • Understanding on one success case study

Target Audience

All Levels of Test Engineers , Test Managers , Development members , Security Test Engineers

schedule Submitted 4 years ago

Public Feedback