Download Safari Books Online apps: Apple iOS | Android

Entire Site

Safari Books Online

    Free Trial

    Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.

    CISSP Video Course Domain 9 – Application Security

    Subscriber Reviews • Browse Similar Topics

    Overview

    The fast, powerful way to prepare for your CISSP exam!

    30+ hours of personal video training from leading security expert Shon Harris

    Achieving the (ISC)2’s globally recognized CISSP can give your IT career a lift. In this DVD, the world’s #1 CISSP trainer brings her legendary five-day boot camp to your computer screen. Packed with over 30 hours of instruction adapted from Shon’s classes, this video course includes realistic labs, scenarios, case studies, and animations designed to build and test your knowledge in real-word settings. Preparing for the CISSP has never been this easy or convenient.

    Master the skills and concepts you need for all ten CISSP common body of knowledge domains:

    • Access Control

    • Application Security

    • Business Continuity and Disaster Recovery Planning

    • Cryptography

    • Information Security and Risk Management

    • Legal, Regulations, Compliance, and Investigations

    • Operations Security

    • Physical (Environmental) Security

    • Security Architecture and Design

    • Telecommunications and Network Security

    System Requirements

    OPERATING SYSTEM: Windows 2000, XP, or Vista; Mac OS X 10.4 (Tiger) or later
    MULTIMEDIA: DVD drive; 1024 x 768 or higher display; sound card with speakers
    COMPUTER: 500MHz or higher CPU; 128MB RAM or more

    Subscriber Reviews

    Average Rating: 2.3333333333333335 out of 5 rating Based on 3 Ratings

    "Useful" - by Kryston on 06-FEB-2011
    Reviewer Rating: 1 star rating2 star rating3 star rating4 star rating5 star rating
    This is a great alternative to constantly reading or taking quizes.  The problem is the sections are broken up into such small pieces it is beyond annoying.  There are sections in these videos that are less than a minute long.  This means you have to load each and every one over and over.  If they would just let you have a feature that loads the next segment automatically it would help.

    I still find these videos useful, but the way I helped them along is to have 2 systems setup next to each other.  I can play a brainless game while watching/listening to the videos on the other.  It works and it gives you a break from the normal study routine.
    Report as Inappropriate

    Table of Contents

    Chapter/Selection

    Time

    Course Introduction

    Play Video

    00:07:24

    Domain 9 – Application Security

    Preview

    00:01:24

    How Did We Get Here?

    Preview

    00:00:50

    Why Are We Not Improving at a Higher Rate?

    Preview

    00:01:53

    Usual Trend of Dealing with Security

    Preview

    00:02:16

    Software Development Tools

    Preview

    00:02:47

    Security Issues

    Preview

    00:01:11

    Language Types

    Preview

    00:04:05

    Turn Into Machine Code

    Preview

    00:01:16

    New and Old

    Preview

    00:00:54

    Object-Oriented Programming

    Preview

    00:01:07

    Classes and Objects

    Preview

    00:02:28

    Functions and Messages

    Preview

    00:01:44

    Object-Oriented Programming Characteristic

    Preview

    00:01:12

    Polymorphism

    Preview

    00:02:29

    Module Characteristics

    Preview

    00:00:56

    Low Cohesion

    Preview

    00:01:05

    Coupling

    Preview

    00:00:48

    Agenda 2

    Preview

    00:01:20

    Distributed Computing

    Preview

    00:00:55

    Distributed Computing – ORBs

    Preview

    00:00:50

    Common Object Request Broker Architecture

    Preview

    00:00:40

    COM Architecture

    Preview

    00:01:37

    Enterprise Java Beans

    Preview

    00:00:50

    J2EE Platform Example

    Preview

    00:01:31

    Linking Through COM

    Preview

    00:02:02

    Mobile Code with Active Content

    Preview

    00:03:13

    Java and Applets

    Preview

    00:02:59

    Database Systems

    Preview

    00:01:37

    Database Model

    Preview

    00:03:22

    Object-Oriented Database

    Preview

    00:01:00

    Benefits of OO Database Model

    Preview

    00:01:40

    Database Models – Relational Components

    Preview

    00:04:46

    Database Integrity

    Preview

    00:01:23

    Different Modeling Approaches

    Preview

    00:01:15

    Database Access Methods

    Preview

    00:06:18

    Database Connectivity

    Preview

    00:01:56

    Database Security Mechanisms

    Preview

    00:02:11

    Rollback Control

    Preview

    00:01:10

    Checkpoint Control

    Preview

    00:00:45

    Checkpoint Protection

    Preview

    00:01:12

    Lock Controls

    Preview

    00:00:47

    Deadlock Example

    Preview

    00:01:33

    Two-Phase Commit

    Preview

    00:00:42

    Lock Controls Help to Provide ACID

    Preview

    00:03:02

    Inference Attack

    Preview

    00:01:08

    Database View Control

    Preview

    00:00:55

    Common Components

    Preview

    00:00:41

    Data Warehousing

    Preview

    00:03:08

    Using a Data Warehouse

    Preview

    00:01:20

    Metadata

    Preview

    00:00:10

    Database Component

    Preview

    00:01:29

    Data Mart

    Preview

    00:02:22

    Potential Malicious Traffic Tunneling Through Port 80

    Preview

    00:01:45

    OLTP

    Preview

    00:02:43

    Knowledge Management

    Preview

    00:00:42

    Knowledge Components

    Preview

    00:00:42

    HR Example

    Preview

    00:00:57

    Knowledge Discovery In Databases

    Preview

    00:01:30

    Expert Systems

    Preview

    00:04:15

    Software Development Models

    Preview

    00:03:48

    Project Development – Phases I through V

    Preview

    00:01:00

    Project Development – Phases VI and VII

    Preview

    00:01:05

    Testing Types

    Preview

    00:01:57

    Data Contamination Controls

    Preview

    00:01:02

    Best Practices for Testing

    Preview

    00:01:17

    Test for Specific Threats

    Preview

    00:01:31

    Verification versus Validation

    Preview

    00:01:00

    Evaluating the Resulting Product

    Preview

    00:01:08

    Controlling How Changes Take Place

    Preview

    00:02:58

    Administrative Controls

    Preview

    00:02:37

    Common Information Flow

    Preview

    00:02:41

    Tier Approach and Communication Components

    Preview

    00:01:00

    Tiered Network Architectures

    Preview

    00:00:57

    Sensitive Data Availability

    Preview

    00:05:09

    Cookies

    Preview

    00:04:24

    Find Out Where You Have Been

    Preview

    00:00:57

    Pulling Data

    Preview

    00:01:46

    Provide the Hackers with Tools

    Preview

    00:02:08

    Common Web Server Flaws

    Preview

    00:01:07

    Improper Data Validation

    Preview

    00:01:58

    Uniform Resource Locator (URL)

    Preview

    00:01:59

    Directory Traversal

    Preview

    00:01:03

    Buffer Overflow

    Preview

    00:00:57

    Cross-Site Scripting Attack

    Preview

    00:01:51

    Common SQL Injection Attack

    Preview

    00:01:30

    Attacking Mis-configurations

    Preview

    00:01:11

    CGI Information

    Preview

    00:03:19

    Authentication

    Preview

    00:00:51

    Protecting Traffic

    Preview

    00:06:40

    Rolling ‘em Out

    Preview

    00:04:30

    Virus

    Preview

    00:04:46

    More Malware

    Preview

    00:01:48

    Trojans

    Preview

    00:02:38

    A Back Orifice Attack!

    Preview

    00:00:59

    NetBus and Hoaxes

    Preview

    00:01:35

    Malware Protection Types

    Preview

    00:01:01

    Signature Scanning

    Preview

    00:00:58

    Monitoring Activities

    Preview

    00:00:55

    Monitoring for Changes

    Preview

    00:01:21

    More Bad Stuff

    Preview

    00:02:01

    Disclosing Data In an Unauthorized Manner

    Preview

    00:01:31

    Covert Timing Channel

    Preview

    00:01:03

    Circumventing Access Controls

    Preview

    00:01:16

    Attacks

    Preview

    00:01:28

    Attack Type – Race Condition

    Preview

    00:05:42

    How a Buffer Overflow Works

    Preview

    00:01:38

    Watching Network Traffic

    Preview

    00:01:22

    Traffic Analysis

    Preview

    00:01:07

    Functionally Two Different Types of Rootkits

    Preview

    00:01:18

    Examples of Trojaned Files

    Preview

    00:00:48

    Domain 9 Review

    Preview

    00:03:55