title
Please take a moment to fill out this form. We will get back to you as soon as possible.
All fields marked with an asterisk (*) are mandatory.
Securing Coding Fundamentals (WSKF601)
Duration
3
Course
LNX-WSKF601
Available Formats
Classroom Training, Online Training
Course Description
Overview
Empower yourself to write and verify secure software by design. Learn and practice with hands-on labs that build behavior-changing skills fundamental to security implementation, boosting your professional IT security maturity.Key Benefits for You:
- Live, instructor-led hands-on labs
- Learn to incorporate security into your software design process
- Increase your productivity and the security of your coding
By completing this course, participants will be prepared to write and independently test for web application and other vulnerabilities, fix vulnerabilities and apply secure design patterns using the Security Knowledge Framework. Participants will grow their security maturity with behavior-changing impact for new career opportunities.
Objectives
During this course, students will learn:
To independently test for web application vulnerabilities, perform threat modeling sessions, and prevent business logic vulnerabilities. Hands-on labs will increase your understanding of how to fix vulnerabilities and which design patterns to apply. Participants will also learn to practice security by design using the Security Knowledge Framework and use security automation to add value to the CI/CD pipeline.
Audience
This course is designed for developers, DevOps, testers, auditors, and security professionals involved in the modern software development process who want to learn to build secure software by design, not an afterthought.
Prerequisites
-
Students should have a basic understanding of web development principles and familiarity with the chosen development language. They will need a computing system with adequate performance specifications and access to the provided demo environments.
Topics
Intro to principles and practice of secdev
- Introduction to vulnerabilities
- Playing with identifying real threats and security requirements
- Common server-side vulnerabilities and their defense
- Injections: SQLi, XML injections, JSON, XPath, XSS, cookie injection, open redirection, http header injection
- Path traversal, XXE, Buffer overflow, Zip bomb, Million laugh, RFI, Insecure file upload, Code execution
- Insecure direct object reference
- Security by design
- Threat modelling
- Separation of duties, trust boundaries, security boundaries, defence in depth, principle of least privilege, minimising the attack surface, risk driven mitigation
- Business logic vulnerabilities
Related Courses
-
RHEL SELinux Policy Administration
OSUN-429- Duration: 3 Days
- Delivery Format: Classroom Training, Online Training
- Price: 1,755.00 USD
-
Microsoft Security Operations Analyst
MOC-SC-200T00- Duration: 4 Days
- Delivery Format: Classroom Training, Online Training
- Price: 2,380.00 USD
Self-Paced Training Info
Learn at your own pace with anytime, anywhere training
- Same in-demand topics as instructor-led public and private classes.
- Standalone learning or supplemental reinforcement.
- e-Learning content varies by course and technology.
- View the Self-Paced version of this outline and what is included in the SPVC course.
- Learn more about e-Learning
Course Added To Shopping Cart
bla
bla
bla
bla
bla
bla
Self-Paced Training Terms & Conditions
??spvc-wbt-warning??
Exam Terms & Conditions
??exam-warning??
??group-training-form-area??
??how-can-we-help-you-area??
??personalized-form-area??
??request-quote-area??
Sorry, there are no classes that meet your criteria.
Please contact us to schedule a class.
STOP! Before You Leave
Save 0% on this course!
Take advantage of our online-only offer & save 0% on any course !
Promo Code skip0 will be applied to your registration
Nothing yet
Purchase Information
??elearning-coursenumber?? ??coursename??
View Cart
title
Please take a moment to fill out this form. We will get back to you as soon as possible.
All fields marked with an asterisk (*) are mandatory.