How to Write Secure Code

Prerequisites:

• Basic knowledge of any programming language 
• Basic knowledge of the software development life cycle 

Audience

• Developers
• Software architects
• Security professionals

Overview:

After the major attacks against national infrastructures, Security Professionals found that the majority of the vulnerabilities that caused the attacks came from poor and vulnerable code that the developers write. 

Developers now need to master the techniques of how to write Secure Code, because we are in a situation where anyone can use availble tools to write a script that can effectivly disable a large organization's systems because the developers have written poor code.

This Course aims to help in the following:

1. Help Developers to master the techniques of writing Secure Code
2. Help Software Testers to test the security of the application before publishing to the production environment
3. Help Software Architects to understand the risks surrounding the applications
4. Help Team Leaders to set the security base lines for the developers
5. Help Web Masters to configure the Servers to avoid miss-configurations

In this course you will also see details of the latest cyber attacks that have been used and the countermeasures used to stop and prevent these attacks.

You will see for yourself how developers mistakes led to catastrophic attacks, and by participatig in the labs during the course you will be able to put into practise the security controls and gain the experience and knowledge to produce secure coding.

Who should Attend this Course? 

This Secure Code Training is ideal for those working in positions such as, but not limited to:

• Web Developers
• Mobile Developers
• Java Developers
• Dot Net Developers
• Software Architects
• Software Tester
• Security Professionals
• Web Masters

Course Outline:

Module 1: Introduction to Secure Coding

• Overview of secure coding practices
• Common vulnerabilities in software
• Importance of secure development life cycle

Module 2: Web, Windows, and Mobile Application Basics

• Introduction to application platforms
• Security implications for each platform
• Best practices for secure development

Module 3: Application Attacks and Exploits

• Cross-Site Scripting (XSS)
• SQL Injection
• Cross-Site Request Forgery (CSRF)

Module 4: Server Attacks and Exploits

• Denial of Service (DoS) attacks
• Buffer Overflow (BOF)
• Common server vulnerabilities

Module 5: Validation and Verification

• Input validation techniques
• Data sanitization and output encoding
• Verifying security measures

Module 6: Security Controls and Countermeasures

• Implementing access control
• Using encryption for data security
• Protecting against common threats

Module 7: Mobile Application Secure Coding

• Security concerns in mobile development
• Implementing secure mobile app architectures
• Handling mobile data securely

Module 8: Security Standards and Testing

• Overview of security standards (e.g., OWASP)
• Testing for security vulnerabilities
• Best practices for security testing