Programming Foundations: Secure Coding

Programming Foundations: Secure Coding

English | MP4 | AVC 1280×720 | AAC 48KHz 2ch | 1h 34m | 559 MB

Learn how to incorporate security into the software development life cycle. Move security into your design and build phases by identifying common insecure code issues and embracing the mindset of a security professional. In this course, security architect Frank Moley provides a basic understanding of secure coding practices. Learn how to understand your attackers and risks and mitigate issues at critical junctures in your code, including thick app, client, and server interactions. Plus, explore how to prevent unauthorized access and data leaks with authentication and cryptography. Frank closes with an overview of security in each phase of the software development life cycle, and next steps for strengthening the security posture of your applications.

Topics include:

  • Understanding attackers and risks
  • Documenting your risks
  • Issues related to web client–server interactions
  • Issues related to thick app and client–server interactions
  • Authorization and cryptography issues
  • Implementing security in each phase of the software development life cycle
Table of Contents

1 Implement secure code with your team
2 What you need to know
3 The goal of secure coding
4 Understand an attacker
5 Break what you build
6 Understand your risks
7 Document what you understand
8 Input validation issues
9 Communication channel issues
10 Session management issues
11 Error handling issues
12 Logging and output issues
13 Internal data management issues
14 Configuration issues
15 Database issues
16 File and I O issues
17 Memory management issues
18 Dependency issues
19 Authentication and password issues
20 Authorization and access control issues
21 Cryptography issues
22 Embrace security in design
23 Embrace security in development
24 Embrace security in testing
25 Embrace security in deployment
26 Implement best practices
27 Next steps