Software Security Certification

|

The Software Security Institute (SANS) has recently launched a security certification for Software Developers. The Global Information Assurance Certification Security Software Programmer Certification verifies that a developer knows the common security flows in either Java or C.

This exam looks to be challenging and worthwhile. The Java Handbook covers the details and includes sample test questions. There is a link to their portal (requires login) to take a free 10 question practice test but it was the same questions contained in the handbook. The questions cover standard java (thread synchronization, inner classes, prepared statements) as well as the web-tier (session ids, parameter scrubbing, filters).

If you are looking for a Java certification that isn't your standard programmer/api type exam, then this one appears to answer the mail. I'd be interested in feedback if anyone attempts it.