|
| |
Handling input and output securely |
| |
Determinism and concurrency |
| |
Web development |
| |
Safe error handling and logging |
| |
Engineering for security features |
This course provides developers a strong foundation in software security as it relates to the implementation of applications. Designed with detailed examples and exercises, this class focuses on the right way for developers to think through security problems. It does this with a combination of structured theory, animated demonstrations, technical deep-dives, and illustrated explanations. It connects the habit of “building security in” through proven programming practices and explains common security-related problems in detail so that software engineers can avoid them in their own work.
After successfully completing this course, you will: |
| |
Be able to provide developers a clear understanding of how core Java can be exploited in order to enable them to build secure code |
| |
Identify common Java coding mistakes that impact application security |
| |
Apply best practices when developing software to avoid common security coding errors |
| |
Recognize more security errors when reviewing source code manually or using automated code scanning tools |
| |
Understand multiple secure alternatives for fixing common security bugs |
| |
Understand the state of the art in secure coding best practices and how to apply them to your organization |
| |
Eliminate or mitigate security coding errors in your products faster |
This course is intended for people whose primary job function includes reading or writing application source code (development leads, developers, code auditors). This course is also strongly recommended for those involved with architecture and design (product and security architects and designers). It will also be of interest to QA security advocates and QA leads because it improves their capability to incorporate security into testing.
Attendees should be fluent in core Java development and have a basic understanding of component design. Completion of a 1-day or 2-day Fundamentals course is highly recommended.
This course is usually delivered by John Steven
This course is most effective when both its exercises and lecture examples are based on the software you develop. Cigital can work with you to develop compelling exercises that stresses your organization’s software security goals and messages. Similarly, the lecture examples are also more effective if they are based on one of your actual systems. Our experience shows that students react very positively when the course is based on systems with which they are familiar.
|