IU Web Application Security 13.0 Course Overview

Target Audience for IU Web Application Security 13.0

The IU Web Application Security 13.0 course offers comprehensive training in SecureSphere for IT professionals focused on web security.

• IT Security Analysts
• Web Application Developers
• Network Security Administrators
• Systems Engineers
• IT Security Auditors
• Security Architects
• Compliance Officers
• Database Administrators with a focus on security
• IT Professionals who work with SecureSphere products
• Technical Support Engineers for web applications
• Cybersecurity Consultants
• Information Security Managers
• Security Operations Center (SOC) staff
• Incident Response Team members
• Risk Management Professionals

Learning Objectives - What you will Learn in this IU Web Application Security 13.0?

1. Introduction: The IU Web Application Security 13.0 course provides foundational knowledge and skills to secure web applications effectively using SecureSphere, from initial configuration to active blocking.

2. Learning Objectives and Outcomes:

• Understand SecureSphere's architecture and navigate its Web UI for efficient management of web application security.
• Perform initial configuration of SecureSphere, including user authentication, account roles, and ADC content updates.
• Build and manage the Sites Tree by creating sites, server groups, and services, including the discovery and securing of unknown servers.
• Configure HTTP services such as SSL keys installation, data masking, and custom web error pages.
• Create and fine-tune web applications within SecureSphere, directing traffic and adjusting learning thresholds.
• Define and implement action interfaces and sets, such as email and syslog, and utilize followed actions for system administration.
• Develop robust security policies to defend against web attacks and manage policy implementation strategies.
• Profile web applications to understand and protect against threats, leveraging profile optimization for better security.
• Integrate ThreatRadar feeds and services for enhanced threat intelligence and protection against bots and community threats.
• Analyze and manage alerts and violations, tune policies to reduce false positives, and generate reports for security insights.
• Transition SecureSphere from simulation to active blocking mode, ensuring the accuracy of the tuned configurations.
• Configure reverse proxy settings, SSL cipher suites, and error page settings to meet specific deployment requirements.
• Apply practical skills in a capstone exercise to reinforce learning, including site hierarchy configuration, data masking, and backup automation.