Course Outline
Introduction to Application Security
- The significance of application security in modern software development
- An overview of prevalent cyber threats and attack vectors
- Understanding security risks within web and mobile applications
Secure Software Development Lifecycle (SDLC)
- Integrating security measures across every phase of development
- Threat modeling and risk assessment strategies
- Automating security testing within CI/CD pipelines
Understanding Common Security Vulnerabilities
- An introduction to the OWASP Top 10 security risks
- Common coding flaws that result in vulnerabilities
- Practicing the exploitation of insecure applications (hands-on exercises with DVWA/WebGoat)
Input Validation and Secure Coding Practices
- Preventing SQL injection, cross-site scripting (XSS), and command injection
- Best practices for input sanitization and validation
- Establishing secure authentication and authorization mechanisms
Session Management and Data Protection
- Managing session security: cookies, tokens, and JWT best practices
- Techniques for data encryption and secure storage
- Developing secure APIs and protecting them against abuse
Security Testing and Vulnerability Assessment
- Utilizing OWASP ZAP and Burp Suite for security testing
- Conducting static and dynamic application security testing (SAST/DAST)
- Fundamentals of penetration testing for developers
Implementing Secure DevOps (DevSecOps)
- Automating security within DevOps workflows
- Container security and securing cloud-based applications
- Incident response and continuous security monitoring
Summary and Next Steps
- Key takeaways from the course
- Recommended resources for continued learning
- Q&A session and closing remarks
Requirements
- Fundamental knowledge of any programming language
- Experience in application development
Target Audience
- Software developers
- Application security engineers
- DevOps and security teams
Testimonials (2)
The different type of attacks to expose or create web vulnerabilities, how can I prevent them, and what tool/s I can use to ensure that the application I am developing is secured and will be difficult to hack.
Glyssa Mae Betonio - Metropolitan Bank and Trust Company
Course - Application Security for Developers
Lot's of information explained very well. Good examples, interesting exercises. Trainer showed us his real world experience.
