EC-Council CASE case studies
EC-Council CASE · Put your knowledge to work in context.
The Certified Application Security Engineer (CASE Java) is an EC-Council credential aimed at Java developers with at least two years of experience, plus anyone moving into an application security engineer, analyst, or tester role. Its stated scope is broader than secure coding guidelines: the ten-module program covers security activities across the whole software development life cycle - planning, requirements, design, coding, testing, and deployment. The EC-Council CASE case studies are 5 cases and about 4,590 words.
1Northwind Pay: a WAF purchase after a nine-day account takeover spree
Northwind Pay runs a B2B payments API: 38 microservices, 2.4 million authenticated calls per day, and a single OAuth 2.0 token endpoint. Last month's incident review found no malware, no injection payloads, and zero WAF blocks.
874 words, about 4 min2PixelVault: three incidents in one afternoon and a regex-shaped answer
PixelVault is a photo-sharing backend. A client sends JSON containing an image url and a filename.
902 words, about 5 min3LedgerLoop: a cross-tenant invoice leak and a stale-claim architecture
LedgerLoop is a multi-tenant accounts-payable SaaS: 4,200 tenants, one shared Postgres database, a tenant id column on every table, and a single API. Authentication issues an RS256 JWT containing sub, tenant id, role and a 24-hour exp; the browser caches it in localStorage.
934 words, about 5 min4MediTrace: ECB, one key everywhere, and a nine-hour re-encryption
MediTrace stores 12 million patient records in MySQL. The application encrypts the SSN, date of birth and diagnosis columns with AES-256 in ECB mode using a single key held in an environment variable - the same key in dev, staging and production.
984 words, about 5 min5Halcyon Logistics: 4,180 SAST findings and a six-minute DAST scan
Halcyon Logistics has 150 developers across 22 teams shipping twice a week from a monorepo of 3.1 million lines of Java, Python and TypeScript. Security bought a SAST tool and a DAST tool.
896 words, about 4 min