Course Outline
Introduction to Application Security
- The importance of application security in modern software development
- Overview of common cyber threats and attack vectors
- Understanding security risks in web and mobile applications
Secure Software Development Lifecycle (SDLC)
- Integrating security into every phase of development
- Threat modeling and risk assessment
- Automated security testing within CI/CD pipelines
Understanding Common Security Vulnerabilities
- Introduction to OWASP Top 10 security risks
- Common coding flaws that lead to vulnerabilities
- Exploiting insecure applications (hands-on exercises with DVWA/WebGoat)
Input Validation and Secure Coding Practices
- Preventing SQL injection, cross-site scripting (XSS), and command injection
- Best practices for input sanitization and validation
- Implementing secure authentication and authorization mechanisms
Session Management and Data Protection
- Handling session security: best practices for cookies, tokens, and JWT
- Data encryption techniques and secure storage
- Secure API development and protection against API abuses
Security Testing and Vulnerability Assessment
- Using OWASP ZAP and Burp Suite for security testing
- Static and dynamic application security testing (SAST/DAST)
- Penetration testing fundamentals for developers
Implementing Secure DevOps (DevSecOps)
- Security automation in DevOps workflows
- Container security and securing cloud applications
- Incident response and security monitoring
Summary and Next Steps
- Key takeaways from the course
- Resources for further learning
- Q&A and closing remarks
Requirements
- Fundamental knowledge of any programming language
- Experience in application development
Target Audience
- Software developers
- Application security engineers
- DevOps and security teams
Testimonials (2)
The different type of attacks to expose or create web vulnerabilities, how can I prevent them, and what tool/s I can use to ensure that the application I am developing is secured and will be difficult to hack.
Glyssa Mae Betonio - Metropolitan Bank and Trust Company
Course - Application Security for Developers
Lot's of information explained very well. Good examples, interesting exercises. Trainer showed us his real world experience.