Learn how to incorporate security into the software development life cycle. Add secure coding practices to agile processes to protect data and prevent recurring flaws.
Overview
Syllabus
Introduction
- Implement secure code with your team
- What you need to know
- The goal of secure coding
- Understand an attacker
- Break what you build
- Understand your risks
- Document what you understand
- Input validation issues
- Communication channel issues
- Session management issues
- Error handling issues
- Logging and output issues
- Internal data management issues
- Configuration issues
- Database issues
- File and I/O issues
- Memory management issues
- Dependency issues
- Authentication and password issues
- Authorization and access control issues
- Cryptography issues
- Embrace security in design
- Embrace security in development
- Embrace security in testing
- Embrace security in deployment
- Implement best practices
- Next steps
Taught by
Frank P Moley III
