Postgraduate Certificate in White Box Testing for Secure Software Development

The Postgraduate Certificate in White Box Testing for Secure Software Development is a comprehensive programme designed for software professionals seeking to enhance their skills in ensuring secure software development through advanced testing methodologies. This programme covers the intricacies of white box testing techniques, including code review, static and dynamic analysis, and security testing frameworks, tailored to address the complexities of modern cybersecurity challenges. It is ideal for software engineers, cybersecurity specialists, and quality assurance professionals looking to deepen their expertise in secure software development practices.

Participants will develop key skills in identifying and mitigating security vulnerabilities early in the software development lifecycle, leveraging state-of-the-art tools and methodologies to conduct thorough and systematic testing. The curriculum includes hands-on training in integrating security testing into development workflows, understanding security protocols, and applying secure coding practices. Students will also gain proficiency in using advanced testing tools, such as static code analyzers and dynamic application security testing (DAST) tools, to identify and rectify security flaws effectively.

The career impact of this programme is significant, as graduates will be well-equipped to contribute to the security of software systems in various industries, from fintech to healthcare. They will be able to lead secure software development initiatives, conduct thorough security assessments, and implement robust security testing strategies, thereby enhancing the security posture of organizations. The programme equips professionals with the knowledge and skills necessary to adapt to evolving cybersecurity threats and contribute to the development of secure, reliable, and resilient software systems.

1. 1. Fundamentals of White Box Testing: Learners will study the core principles of white box testing, including code coverage, static analysis, and dynamic analysis techniques. They will gain practical skills in using various tools for code inspection and debugging.
2. 2. Secure Software Development Principles: Learners will explore key principles of secure software development, including security best practices, risk management, and secure coding standards. They will learn how to integrate security into the software development lifecycle.
3. 3. Static Code Analysis Tools: Learners will delve into the use of static code analysis tools for identifying security vulnerabilities and code defects. They will practice using tools such as SonarQube and Fortify to analyze code and generate reports.
4. 4. Dynamic Code Analysis Techniques: Learners will study dynamic code analysis techniques for detecting runtime errors and security issues. They will gain hands-on experience with tools like??????(??Achilles)?????????????????
5. 5. Web Application Security Testing: Learners will focus on testing web applications for security vulnerabilities such as XSS, SQL injection, and CSRF. They will perform practical tests using tools like Burp Suite and OWASP ZAP.
6. 6. Mobile Application Security Testing: Learners will learn how to test mobile applications for security issues, including code-level security and runtime security. They will practice using tools like Burp Collaborator and AppScan for mobile testing.
7. 7. Advanced White Box Testing Techniques: Learners will explore advanced white box testing techniques such as fuzzing, symbolic execution, and fault injection. They will apply these techniques to real-world scenarios and learn how to automate these tests.
8. 8. Secure Software Development Life Cycle (SDLC): Learners will understand the integration of white box testing into the full SDLC, covering planning, design, implementation, testing, and deployment phases. They will learn how to create secure software from the ground up.
9. 9. Security Threat Modeling: Learners will study various threat modeling techniques and learn how to identify, assess, and mitigate security threats. They will create threat models for sample applications to practice their skills.
10. 10. Practical Case Studies and Project: Learners will work on a comprehensive project that involves applying all the knowledge and skills gained throughout the course. They will analyze a real software system, identify security vulnerabilities, and develop a testing plan to address these issues.