Core IBM Rational AppScan Fundamentals

This is a lab-intensive, hands-on tool-oriented AppScan / security training course, essential for experienced enterprise developers and security personnel who need to work with AppScan. This course assumes that students already have a solid understanding of web application vulnerabilities and defenses. This course digs deep into sound processes and practices for using the IBM Rational AppScan tool to test, analyze, and evaluate the security and effectiveness of defenses associated with your web applications. Throughout this course, students thoroughly examine the use of AppScan to test and analyze new or existing web applications. Students will repeatedly analyze vulnerable and defended assets associated with fully-functional web applications. This hands-on approach drives home the mechanics of how to secure web applications using AppScan in the most practical of terms. The course then goes into the advanced features and capabilities of AppScan, showing what they are and how to effectively use them. This includes applying AppScan to specific vulnerabilities and application configurations and scenarios. Many of these are accompanied by a hands-on lab that shows the issues as well as how AppScan responds to effective solutions and defenses for these vulnerabilities.