|
| |
Understanding the Java platform |
| |
Handling input and output securely |
| |
Determinism and concurrency |
| |
Safe error handling and logging |
| |
Engineering for security features |
| |
Software security in operations |
This course provides developers a strong foundation in software security as it relates to the implementation of applications. Designed with detailed examples and exercises, this class focuses on the right way for developers to think through security problems. It does this with a combination of structured theory, animated demonstrations, technical deep-dives, and illustrated explanations. It connects the habit of "building security in" through proven programming practices and explains common security-related problems in detail so that software engineers can avoid them in their own work.
After successfully completing this course, you will: |
| |
Apply best practices when developing software to avoid common security coding errors |
| |
Have a clear understanding of how Java EE vulnerabilities can be exploited |
| |
Understand multiple secure alternatives to fix common security bugs in code |
| |
Identify common Java EE coding mistakes that impact application security |
| |
Recognize more security errors when reviewing source code either manually or using automated code scanning tools |
| |
Understand the state of the art in secure coding best practices and how to apply them to your organization |
| |
Eliminate or mitigate security coding errors in your products faster |
This course is intended for people whose primary job function includes reading or writing application source code (development leads, developers, code auditors). This course is also strongly recommended for those involved with architecture and design (product and security architects and designers). It will also be of interest to QA security advocates and QA leads because it improves their capability to incorporate security into testing.
Attendees should be fluent in J2EE development and have a basic understanding of component design. Completion of a 1-day or 2-day Fundamentals course is highly recommended.
This course is usually delivered by Pravir Chandra. Also available to deliver this course is John Steven.
|