Secure Coding for Developers

This one or two day course is designed to train developers on various aspects of secure coding. This course is available in .NET and Java and is a combination of theory, case studies, practical examples, brainstorming sessions, quizzes and interactive lab exercises where developers dive into the code to fix an already existing vulnerability or if they are building new application or functionality, then how can they start by writing secure code so as to not introduce any such vulnerabilities. After taking this class, students will be able to understand basics of web application security, root cause of various web application vulnerabilities and how to write secure code. common web application attacks and how they work and strategies to prevent these attacks.  This course will help participants to understand

  1. Security considerations of software development
  2. Implementing security in various phases of SDLC
  3. Various aspects of secure coding and importance of secure coding guidelines
  4. Tradeoff between Security and Usability
  5. Importance of secure design and architecture

Course Outline

  • Security Planning and Mindset
  • Secure Design and Architecture
  • Secure Coding Guidelines
    • Input Validation
    • Output Encoding
    • Secure Session Management
    • Authentication and Authorization
    • Error Handling
    • Encryption
    • Lack of Automation Prevention
    • Logging and Auditing
    • Business Logic Flaws
    • Encryption
  • Security Testing in QA

The class is designed in the following way:

  • Overview of the topic,
  • Explain the type of attack,
  • Real case study on this type of attack,
  • Interactive Lab sessions on how this attack works on a feature rich fully functional website,
  • Solutions to prevent this type of attack.

Pre-requisites

  1. Familiarity with Firefox.
  2. Strong technical background with programming experience in either .NET or Java
  3. Working knowledge of Eclipse or .NET framework

Duration – One or Two day

Facility Requirement

  1. Projector
  2. Whiteboard
  3. Computer (Desktop/Laptop) with windows and firefox browser
  4. Programming framework like (.NET, IIS, SQL Server) or (Eclipse, MySql, Tomcat) installed.
  5. Internet connection

Contact: sales@myappsecurity.com