After the seminar you will be able to...

• Apply basic safety testing methods
• Select basic security testing techniques
• Apply simple security testing measures in the software life cycle 

This seminar offers you...

• Systematic introduction to the basics of security testing
• Systematic integration of security testing techniques with the activities of a software life cycle
• Introduction to security testing techniques such as fuzzing, scanning etc.

After the course, participants will be able to carry out simple threat analyses for classic Internet applications and, on the basis of these, to classify security risks, formulate security test objectives and systematically create and carry out security tests.

• Analyse a given set of requirements from a security perspective to identify deficiencies
• Analysis of a given design document from a security perspective to identify vulnerabilities
• Understand the role of security testing during the component test phase
• Design of component-level (abstract) security tests against a defined implementation specification.
• Analysis of the results of component-level tests to determine the adequacy of the code from a security perspective
• Understand the basic principles of a static code checker (e.g., Sonarqube/Sonarlint).
• For a given project scenario: Demonstrate the ability to apply an automated static code checker and understand the pitfalls of automation.
• Create an end-to-end security test scenario that verifies one or more specified security requirements and tests a described functional process
• Define a set of acceptance criteria for the security aspects of a particular acceptance test.
• Create an end-to-end approach for security testing/regression testing based on a given scenario
• Understand the differences between regression testing, re-testing and penetration testing

Product managers, project managers in product development, product developers, requirements developers, test developers, test analysts, test managers, acceptance testers, quality managers and consultants

Dr. Jürgen Großmann

Jürgen Großmann is team leader of the Critical Systems Engineering group in the SQC business unit of the Fraunhofer Institute FOKUS. He is an expert in quality assurance, risk analysis and IT security testing in the field of critical, networked software systems in the automotive industry and the financial sector. 

Dr. Johannes Viehmann

Dr. Johannes Viehmann is a Senior Researcher and Project Manager in the Critical Systems Engineering group within the SQC business unit at Fraunhofer Institute FOKUS. He is an expert in safety-critical, highly networked systems, trust-building concepts, and risk management.