Scribd Logo
Upload

Welcome to Scribd!

  • 8 views

    DC9140 - Pathway To AppSec

    Uploaded by

    muhammad9julfikar9hy
    The document provides an agenda for a presentation on becoming a cyber security analyst and learning application security. The agenda includes introducing common application security terms, defining security vulnerabilities, resources for learning appsec, how to define the impact and severity of vulnerabilities, how to write good vulnerability reports, testing methodologies, and tips for future career development in application security. The presentation aims to provide beginners a pathway for getting started in the application security field.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content

    You might also like

    DC9140 - Pathway To AppSec

    Uploaded by

    muhammad9julfikar9hy
    8 views15 pages
    The document provides an agenda for a presentation on becoming a cyber security analyst and learning application security. The agenda includes introducing common application security terms, defining security vulnerabilities, resources for learning appsec, how to define the impact and severity of vulnerabilities, how to write good vulnerability reports, testing methodologies, and tips for future career development in application security. The presentation aims to provide beginners a pathway for getting started in the application security field.

    Original Description:

    Original Title

    DC9140_-_Pathway_to_AppSec

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document provides an agenda for a presentation on becoming a cyber security analyst and learning application security. The agenda includes introducing common application security terms, defining security vulnerabilities, resources for learning appsec, how to define the impact and severity of vulnerabilities, how to write good vulnerability reports, testing methodologies, and tips for future career development in application security. The presentation aims to provide beginners a pathway for getting started in the application security field.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    8 views15 pages

    DC9140 - Pathway To AppSec

    Uploaded by

    muhammad9julfikar9hy
    The document provides an agenda for a presentation on becoming a cyber security analyst and learning application security. The agenda includes introducing common application security terms, defining security vulnerabilities, resources for learning appsec, how to define the impact and severity of vulnerabilities, how to write good vulnerability reports, testing methodologies, and tips for future career development in application security. The presentation aims to provide beginners a pathway for getting started in the application security field.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    of 15

    Pathway to

    Application
    Security
    Cyber Security Analyst at Detox Technologies

    Bugcrowd Top 150 & MVP Q1

    Synack Red Teamer


    echo `whoami`
    Author | Speaker | Blogger

    Poet

    Explorer & Learner


    AppSec 101
    Common Terms
    What are security vulnerability
    Pathway to Learn Appsec
    Agenda
    How to Define Impact
    How to Write Good Reports
    Methodologies
    Future Roadmap
    AppSec 101 What is Appsec?

    What areas are covered in Appsec?

    Is there any difference in Bug Bounties vs AppSec vs


    Pentesting?

    What is current competency of AppSec market?

    Is it possible for a beginner to get started into AppSec?

    Are there any specific requirements to be into AppSec?

    What all prerequisites are a plus to get into AppSec?


    Common Terms
    • Vulnerability / Bug • Chaining Issues
    • Attack Vector • Responsible Disclosure

    • Attack Surface • Bounty

    • Exploit/Exploitation • Hall of Fame

    • Impact & Severity • Red Teaming

    • Issue • Blue Teaming

    • Pentesting – Manual / Automated • Purple Teaming

    • Vulnerability Assessment • Thick Client

    • Automation • Sandbox Environment

    • Reconnaissance And some others

    • False Positive/True Positives


    What are
    Security
    Vulnerabilities?
    Pathway to Learn
    AppSec
    Resources to Follow
    How to Define Impact & Severity
    Two Matrices to Define Severity:
    • Impact (Three Matrices)
    • Confidentiality
    • Integrity
    • Availability
    • Exploitability (Five Matrices)
    • Attack Vector
    • Attack Complexity
    • Privileges Required
    • User Interaction
    • Scope
    Writing a Good Report
    Methodologies
    Learn, Implement & Get Results
    Tips
    FUTURE ROADMAP
    @harshbothra_

    Get in Touch at

    Website – https://harshbothra.tech

    Twitter - @harshbothra_

    Instagram - @harshbothra_

    Medium - @hbothra22

    LinkedIn - @harshbothra

    Facebook - @hrshbothra

    Email – hbothra22@gmail.com
    @harshbothra_

    Thank You …

    You might also like