CASP CompTIA Advanced Security Practitioner Certification Study Guide (Exam CAS-001)

6Application Security

CERTIFICATION OBJECTIVES

6.01 Web application security design considerations

6.02 Specific application issues

6.03 Application sandboxing

6.04 Application security frameworks

6.05 Secure coding standards

6.06 Exploits resulting from improper error and exception handling

6.07 Privilege escalation

6.08 Improper storage of sensitive data

6.09 Fuzzing/false injection

6.10 Secure cookie storage and transmission

6.11 Client-side processing vs. server-side processing

6.12 Buffer overflow

6.13 Integer overflows

6.14 Memory leaks

6.15 Race conditions

6.16 Resource exhaustion

Two-Minute Drill

Q&A Self Test

Applications are the reason ...