Enhance Application Security Capabilities

---

Goals

• Understand secure protocol concepts
• Explore DNS filtering capabilities
• Review email security protocols
• Explore application security techniques
• Review sandboxing concepts

Application Protocol Security Baselines

Secure Protocols

• Transport Layer Security (TLS)
• Securing Directory Services
• SNMP Security

File Transfer Services

• File Transfer Protocol (FTP)
• Secure File Transfer Protocol (SFTP)
• FTP Over SSL (FTPS and FTPES)

Email Services

• Simple Mail Transfer Protocol (SMTP)
• Mail Servers

Email Security

• Sender Policy Framework (SPF)
• DomainKeys Identified Mail (DKIM)
• Domain-based Message Authentication, Reporting, and Conformance (DMARC)
• Email Gateway
• Secure Multipurpose Internet Mail Extensions (S-MIME)

Email Data Loss Prevention

• Data Loss Prevention (DLP)

DNS Filtering

• DNS Filtering
• DNS Security

Cloud and Web Application Security Concepts

• Secure Coding
  • Input Validation
  • Secure Cookies
  • Static Code Analysis
  • Code Signing
• Application Protections
• Sandbox