FTSCA250 - Fortify-SAST-Fortify SCA and SSC with exam

This Instructor-Led (4 days) course provides hands-on activities using Fortify to identify and mitigate today's most common business security risks to applications.

This course provides participants with demonstrations and hands-on activities using a practical, Fortify solutions-based approach to identify and mitigate today’s most common business security risks to applications. As a student, you will learn to scan, assess, and secure applications using the Fortify Static Code Analyzer (SCA) and Software Security 
Center (SSC).

• Module 1: Fortify Architecture and Application Security Overview 
• Module 2: Fortify SSC Setup
• Module 3: Fortify SCA Analyzers Metrics
• Module 4: Fortify Static Scanning
• Module 5: Auditing Fortify Scan Results 
• Module 6: Data Validation 
• Module 7: Analysis Trace and Remediating Vulnerabilities
• Module 8: Custom Rules 
• Module 9: Utilize Fortify SSC (Software Security Center), Audit and Report

This course is intended for application developers or security auditors who are new to or have been using the Fortify SCA and SSC to develop secure applications. It is also useful for development managers and application security champions.

To be successful in this course, you should have the following prerequisites or knowledge:
• Basic programming skills (able to read Java, C/C++, or .NET)
• Basic knowledge of web technologies: HTTP Requests and Responses, HTML tags, 
JavaScript, and server-side dynamic content (JSP, ASP, or similar)
• Knowledge of Web and Application development practices 
• Experience developing and/or managing software development for security 
• Knowledge of your organization’s compliance requirements

On the last day of class (exam day), you can test your skills and become a Certified Professional for Fortify SCA.