Description: This program will guide the candidates through Application Security concepts and principles. By completing this program, participants will be able to understand various aspects of application security, understand the use of various frameworks and methodologies. 

Duration: This program consists of three days intensive training course and one week of group work on a capstone project that consist of a white paper. You will receive a certificate upon completion of the course. 

Qualifications: Candidates will need a basic understanding of Software Development Life Cycle and a basic understanding of software programming concepts. 

This is our home

"Bergeron Centre for Engineering Excellence, York University"

ZAS bergeron-108-Edit.jpg

Course Outline

This program consists of three days intensive training course and one week of group work on a capstone-project.

Day 1 BSIMM Framework (Hansen, 2015) 

Day 2 OWASP SAMM (OWASP SAMM Project, 2018)Frameworks 

Day 3 The Practice of AppSec


  • Pipeline Security (DevSecOps) 

  • Dependency Analysis 

  • Threat Modeling 

  • Application Firewalls (Layer 7 devices)

  • API Gateways


  • Pass a Test 

  • Deliver a project using the learnings from the course


Certification Procedure

You will receive a certificate upon completion of the course. Participants must attend all program modules and successfully complete the take-home assignment/exam to receive a certificate. Once the certificate is granted, it will be hashed on the Ethereum blockchain and is globally accessible for further verification.

Program Changes

We will make every effort to present the program as advertised, but it may be necessary to change the date, location, instructors or content with little or no notice. In the event of program cancellation, CCR’s liability is limited to reimbursement of paid fees. 

Cancellations and Substitutions

Substitution of registrants is permitted at any time. If you are unable to find a substitute, a full refund is available if a cancellation request is received in writing 7 days prior to the program date. If a cancellation request is made with less than 7 days’ notice, a $75 administration fee will apply. No other refund is available.

Group Discounts

Please note that the group discount is only available when paying for members of the same organization, at the same time, and payment is made with one invoice.

Delivery Methods(Please select the delivery option on the application form)

In-person(Toronto): The program is available at the primary location (York University , Toronto, Canada)

In-person(Our International Satellite Locations ): The program is available in our satellite locations globally (The list is included in the application form)

Web(Virtual Delivery): The live video stream, including link to program materials and the virtual working environment will be sent to you via email as soon as the registeration confirmed.

Program Details

Delivery Method:

Intensive course -in person

Capstone Project Deadline: One week after the final session

Primary Location

Room 213, Bergeron Centre for Engineering Excellence, York University

Application Deadline & Admission Results

One week prior to the program

Course Fee (per Delegate)-For delivering the program in Toronto or through the webcast.

Early Bird Ticket:  $ 995 CAD plus HST

Regular Fee: $ 1,495 CAD plus HST


1-Are not available for the upcoming in-person program? Join the waiting list for the next program (apply here> the next program)

2-The pricing for international locations would depend on the local chapter pricing policy (Other than Toronto). Please check the delivery methods on the Q&A section, before applying for the program.

3-YorkU students and faculties are entitled to our special pricing, contact us for more details.