Course Description

Summary

This course will equip you with the skills to configure and run scans, analyze results, and apply them to real projects with the OpenText ScanCentral DAST application to secure the software development lifecycle.

Overview

OpenText ScanCentral Dynamic Application Security Testing is a dynamic application security testing tool comprised of the OpenText™ DAST (formerly WebInspect) sensor service and other supporting technologies that you use in conjunction with the OpenText™ Software Security Center to secure your applications.

This course will help you to learn how to use OpenText ScanCentral DAST in the OpenText Software Security Center platform, including Security in the early development life cycle. The focus is on providing simple steps, so you can scan your applications for security through OpenText ScanCentral DAST. This is achieved in a lab environment that mirrors a production environment to showcase the ease of use for scanning dynamically.

Highlights:

• Validate OpenText ScanCentral DAST configurations in the OpenText Software Security Center application.
• Verify WebInspect license in the OpenText Fortify License Infrastructure Manager (LIM) application.
• Run standard scans.
• Create macros (login and workflow).
• Generate reports.
• Run standard REST API scans.
• Run REST API scans through Jenkins DevOps.
• Run Postman collection scans.

Course objectives

On completion of this course, participants should be able to:

• Use OpenText ScanCentral DAST to run scans on applications effectively.
• Verify and review the OpenText ScanCentral DAST results in the OpenText Software Security Center application.
• Create comprehensive standards, workflow-driven, REST API, and Jenkins DevOps macros, scans, and reports.

Prerequisites

To be successful in this course, you should have familiarity working with OpenText ScanCentral DAST through the OpenText Software Security Center for a minimum of one month or longer. You need to have basic programming skills, the ability to read Java or .NET, identify Command-Line usage, and web technologies, such as HTTP requests and responses, HTML tags, JavaScript, and server-side dynamic content (JSP, ASP, or similar); plus, having computer desktop, browser, and file system navigation skills.