(ISC)² CSSLP domain 4: Secure software implementation
Domain 4 of the CSSLP ensures that applicants have the knowledge and experience to avoid security blunders while writing code.
Howard Poston
Howard Poston is a cybersecurity researcher with a background in blockchain, cryptography and malware analysis. He has a master’s degree in Cyber Operations from the Air Force Institute of Technology and two years of experience in cybersecurity research and development at Sandia National Labs. He currently works as a freelance consultant providing training and content creation for cyber and blockchain security.
Page 4
Explore Python for MITRE ATT&CK account and directory discovery
Python can use account and directory discovery to find user data such as accounts, which is valuable to attackers.
(ISC)² CSSLP domain 3: Secure software architecture and design
In Domain 3 of the CSSLP, applicants demonstrate knowledge of software secure design best practices and risk management.
Explore Python for MITRE ATT&CK credential access and network sniffing
Python is used to access credentials in many ways, including extracting them from web browsers’ credential caches and sniffing network traffic.
(ISC)² CSSLP domain 2: Secure software requirements
Domain 2 of the (ISC)² CSSLP evaluates applicants’ ability to develop security requirements for software.
(ISC)² CSSLP domain 1: Secure software concepts
Domain 1 of (ISC)²’s CSSLP certification tests foundational knowledge of secure software development.
Kali Linux: Top 8 tools for reverse engineering
These Kali Linux tools are great for offensive and defensive cybersecurity.
Kali Linux: Top 5 tools for sniffing and spoofing
Sniffing and spoofing network traffic can help protect your organization from potential attacks.
Snort demo: Finding SolarWinds Sunburst indicators of compromise
Use Snort and the indicators of compromise provided by FireEye to detect Sunburst infections.
Kali Linux overview: 14 uses for digital forensics and pentesting
Learn more about Kali Linux forensics and pentesting.