SDT 305 – Testing for Broken Access Control

Course Overview

This course explains how software developers and testers can determine if their web applications are vulnerable to A01:2021 Broken Access Control, as defined by the Open Web Application Security Project (OWASP).

After completing this course, you will understand how to:

• Identify common access control flaws
• Mitigate access control failures
• Define mitigation measures to protect against broken access control
• Apply best practices and ensure compliance