The Software and Systems Engineering Experts
US: +1 (610) 247-9595 / EU: +48 666 74 71 74
Overview
Start scanning your applications in two days
In this two-day course, you will learn how to effectively use HCL AppScan Standard Edition. The course shows you how to create security scans for web applications and web services, and how to review, prioritize, and evaluate the results of your scans.
You'll also learn how to optimize your scan to make it efficient and accurate, and learn some advanced techniques to help you scan your applications. You'll also learn about the different ways you can customize AppScan using the AppScan SDK and the eXtensions Framework (AXF).
Upon completion of the course, students will be able to:
- Scan Web applications for security issues using AppScan Standard Edition
- Scan Web services for security issues using AppScan Standard Edition
- Review scan results, filter false positives, prioritize issues and communicate them to stakeholders
- Create reports based on discovered security issues
- Optimize scan configuration and use advanced techniques to scan Web applications
- Understand how to extend AppScan’s functionality using the AppScan SDK and AppScan eXtensions framework
- Troubleshoot AppScan Standard Edition
ScansResultsReportingWeb services
Who it is for · What you will learn
Built for people who test application security
This course is intended for security professionals. Attendees should have a basic knowledge of web application security and the http(s) standard.
Security professionalsScan web applications and services, then review and prioritize the issues.
DevOps engineersCustomize and automate scans in the development lifecycle.
For your team
- Learn advanced techniques for identifying, prioritizing, and managing vulnerabilities effectively within the AppScan platform, enabling you to enhance the overall security posture of applications.
- Understand how to customize and automate security scans using the AppScan platform, streamlining the process of identifying and remediating vulnerabilities and integrating security seamlessly into the development lifecycle.
- Explore strategies for integrating security practices into the Software Development Life Cycle (SDLC), ensuring that security considerations are an integral part of the development process from inception to deployment.
For you
- Acquire a deep understanding of application security principles, methodologies, and best practices, ensuring a solid foundation for identifying and addressing vulnerabilities.
- Receive expert guidance on using the HCL AppScan Standard Platform, exploring its features and capabilities to conduct thorough security assessments of applications.
- Engage in hands-on exercises and simulations, allowing you to apply theoretical knowledge in practical scenarios. This practical experience enhances your ability to use the AppScan platform effectively.
- Completion of the training may provide certification options, validating your expertise in utilizing the HCL AppScan Standard Platform and boosting your credibility in the field of application security.
- Join a community of professionals with similar interests in application security, fostering networking opportunities that can lead to collaboration, knowledge exchange, and career advancement within the industry.
Not sure the course fits your needs? Tell us about your project and we will suggest the right scope.
Course agenda
Two days, from the first scan to advanced configuration
Every module combines a short demo with exercises in a training project.
Day 1
Configure, scan and report
8 hours
01Introduction
- Course Overview and AppScan product family
02Introduction to HCL AppScan
- AppScan Standard Edition Overview
03Installation
- Installation and Setup
04Configuration
- Making the Most of Your Installation
05Scans preparations
- Configuring a Scan
06Scans execution
- Running a Scan
07Results
- Reviewing Scan Results
08Reporting
- Creating Reports
Day 2
Complex applications and advanced scanning
8 hours
09Complex applications
- Scanning Web 2.0 Applications
10Session management
- Complex Login and Session Management
11License management
- License management and reporting
12Malware and content-based scanning
- Malware, Content-based and Widget Scanning
13Performance optimization
- Optimizing your Scan
14Advanced scan configuration
- Configuring Advanced Scan Settings
15Web Services
- Scanning Web Services
16Extensions
- Extending HCL AppScan Standard Edition
17Troubleshooting
- Troubleshooting HCL AppScan Standard Edition
How it works
What HCL AppScan looks like in class
Real screens from a sample project. Click a screen to enlarge it.
How the training works · Remote, on-site or on your own server
- RemoteLive sessions with the trainer, shared screen and your own exercise project in the browser.
- On-siteAt your office, for one team or several, with the trainer in the room.
- On your instanceOn our lab environment or your own AppScan installation, with your process and examples.
What is included
- Lab environment. An HCL AppScan training project for every attendee, ready before day one.
- Course materials. Slides and exercise guide to keep after the training.
- Certificate. A certificate of completion for every attendee.
- Questions after class. Follow-up questions answered by the trainer.
FAQ
Questions buyers ask about this course
Can you run the training on our own AppScan installation?
Yes. We train on our lab environment or on your own instance, also in a network without internet access, with demo data or your own projects.
Which HCL AppScan version do you teach?
The current release. If your server runs an older version, we adapt the exercises to it.
Can you adapt the agenda to our process?
Yes. We add examples from your projects and your way of working.
Do attendees get a certificate?
Yes, a certificate of completion for every attendee.
What happens after the training?
Attendees can send questions to the trainer after class. For longer support we offer mentoring and consulting on your project.
Where can I find HCL AppScan Standard documentation?
On the HCL Software help center (help.hcl-software.com), which covers installation, scan configuration, reports and release notes for each version.
Is IBM AppScan now HCL AppScan?
Yes. In 2019 the IBM AppScan product line became part of HCL Software, so IBM AppScan Standard is now HCL AppScan Standard.
Talk to our consultants
Leave your details and we will get back to you, usually within one business day.
