Exam Code: CASST-001
The Certified Advanced Software Security Tester (CASST)™ certification is an advanced-level credential designed for professionals who specialize in securing complex software systems. It focuses on in-depth security testing practices and advanced threat analysis to identify vulnerabilities that may not be detected through basic testing approaches. The certification emphasizes embedding security throughout the software development lifecycle, ensuring that applications are designed, tested, and deployed with robust protection against evolving cyber threats.
CASST covers advanced security testing techniques such as deep-dive penetration testing, threat modeling, secure architecture assessment, API and microservices security testing, and advanced use of static and dynamic security analysis tools. Candidates gain expertise in evaluating application security in modern environments, including cloud-native, containerized, and DevSecOps-driven ecosystems. The program also addresses compliance requirements, risk management, and incident response considerations, enabling professionals to align technical security testing with organizational security objectives.
Pre-requisites:
Before a candidate can pursue the Certified Advanced Software Security Tester (CASST), he or she must hold Certified Software Security Tester (CSST) or equivalent certification. The purpose is to make sure the candidate already have good understanding of the test process, the test design techniques and test planning.
E-Course Duration: 20 to 25 Hours
Course Outline
Module Information – 1
- Module 1 – Improving the Security Testing Practices
- Module 2 – Security Test Process Definition
- Module 3 – Lifecycle Alignment and Security Testing Tasks
- Module 4 – Security Test Planning
- Module 5 – Security Test Design
- Module 6 – Implementing Policy-Based Security Tests
- Module 7- Security Test Execution
- Module 8 – Security Test Evaluation
- Module 9 – Security Test Maintenance
- Module 10 – Role of Security Testing in a Lifecycle
- Module 11 – The Role of Security Testing in Design
- Module 12 – The Role of Security Testing in Implementation Activities
- Module 13 – Component Test Analysis & Design
Module Information – 2
- Module 14 – Analyzing Component Test Results
- Module 15 – Component Integration Test Analysis & Design
- Module 16 – The Role of Security Testing in System and Acceptance Test Activities
- Module 17 – Definition of Security-Oriented Acceptance Criteria
- Module 18 – The Role of Security Testing in Maintenance
- Module 19 – Testing the Effectiveness of System Hardening
- Module 20 – Authentication and Authorization
- Module 21 – Firewalls and Network Zones
- Module 22 – Encryption, Intrusion Detection, Malware Scanning and Data Obfuscation
- Module 23 – Training
- Module 24 – Security Awareness
- Module 25 – Attack Motivations
- Module 26 – Social Engineering and Security Awareness
Target Audience
- Professionals who want to upgrade their knowledge on Advanced Software Security Testing,
- Software Testers who want to expand their knowledge of security testing,
- Security testers who wish to obtain an advanced certification to solidify their knowledge,
- Security administrators who want to learn more about how to test the security defenses in their organization, and
- Anyone who wants to learn more about security testing at an Advanced Level.