Application Security Training in Sud-Vest

This instructor-led, live training in Sud-Vest (online or onsite) is designed for intermediate to advanced developers seeking to understand and apply secure coding practices, identify security risks in software, and implement defenses against cyber threats.

Upon completion of this training, participants will be capable of:

• Understanding prevalent security vulnerabilities in web and software applications.
• Analyzing security threats and exploitation techniques employed by attackers.
• Implementing secure coding practices to mitigate security risks.
• Utilizing security testing tools to identify and resolve vulnerabilities.

Today, numerous programming languages can compile code for the .NET and ASP.NET frameworks. While this environment offers robust tools for security development, developers must understand how to apply architecture- and code-level programming techniques to implement desired security features, avoid vulnerabilities, and limit their exploitation.

This course aims to teach developers, through extensive hands-on exercises, how to prevent untrusted code from executing privileged actions, protect resources via strong authentication and authorization, manage remote procedure calls and sessions, introduce alternative implementations for specific functionalities, and more.

The course introduces various vulnerabilities by highlighting typical programming errors made when using .NET. The discussion on ASP.NET vulnerabilities covers various environment settings and their impacts. Furthermore, the section on ASP.NET-specific vulnerabilities addresses general web application security challenges, as well as special issues and attack vectors such as ViewState attacks and string termination attacks.

Participants attending this course will

• Grasp the fundamental concepts of security, IT security, and secure coding
• Identify web vulnerabilities beyond the OWASP Top Ten and learn how to avoid them
• Master the use of various security features within the .NET development environment
• Acquire practical knowledge in utilizing security testing tools
• Recognize typical coding mistakes and learn how to avoid them
• Gain insights into recent vulnerabilities in .NET and ASP.NET
• Access resources and further readings on secure coding practices

Audience

Developers

In this instructor-led live course in Sud-Vest, participants will learn how to formulate the appropriate security strategy to confront the DevOps security challenge.

This Sud-Vest course aims to support professionals in the following ways:

1. Helping developers master the techniques of writing Secure Code
2. Enabling software testers to verify application security before releasing to the production environment
3. Assisting software architects in understanding the risks surrounding applications
4. Guiding team leaders in defining security baselines for developers
5. Helping web masters configure servers to avoid misconfigurations