4Security & development

• 4.1Security Fundamentals, Cryptography, and Authentication (PKI, Digital Signatures)

  Building on the CIA triad (confidentiality, integrity, availability) and its complements (authenticity, accountability, non-repudiation), this section covers, at level-3 depth, how key usage differs across symmetric-key, public-key, and hybrid cryptography, the properties of hash functions, digital signatures signed with a private key and verified with a public key, the PKI and certificate authorities (CAs) that guarantee a public key's validity, multi-factor and biometric authentication, and SSL/TLS for securing web communications.

• 4.2Threats and Countermeasures (Attack Techniques, FW/IDS/IPS/WAF, Zero Trust)

  Learn, at level-3 depth: malware (virus/worm/Trojan horse/ransomware), targeted attacks, phishing, and BEC; web application attacks (SQL injection, XSS, CSRF); DoS/DDoS; perimeter defenses (firewall, IDS, IPS, WAF, DMZ); the perimeter-independent zero trust approach; and organizational management via ISMS, risk management, and CSIRT.

• 4.3System Development Techniques (Object Orientation, UML, Design, Testing)

  Learn, at level-3 depth: the development process (requirements -> external design -> internal design -> programming -> testing); the three pillars of object orientation (encapsulation, inheritance, polymorphism); design visualization with UML (class diagram, use case diagram, sequence diagram); module decomposition metrics (coupling and cohesion); test techniques (white-box testing coverage criteria; black-box testing via equivalence partitioning/boundary value analysis); and review methods.

• 4.4Software Development Management (Agile, DevOps/CI-CD, Estimation, Configuration Management)

  Learn, at level-3 depth: development models (the waterfall model; agile development via Scrum and XP (Extreme Programming); the spiral model); DevOps, CI/CD, and Infrastructure as Code (IaC); estimation techniques (function point method and COCOMO); and configuration management/version control.