Duration
5 days
Introduction
- Software Security and Risk Principles Overview
- OWASP Top 10 2018: Secure Coding
- Secure Coding Practices Checklist
- Secure Coding: Input Validation
- Attacks: Input Validation
- Secure Coding: Output Encoding
- Attacks: Output Encoding
- Practical
DAY 2
- Secure Coding: Authentication and Password Management
- Attacks: Authentication and Password
- Secure Coding: Session Management
- Attacks: Session Management
- Secure Coding: Access Control
- Attacks: Access Control
- Secure Coding: Cryptographic Practices
- Attacks: Weak Cryptograhpy
- Secure Coding: Error Handling and Logging
- Attacks: Error Messages and Poor Log Management
- Secure Coding: Data Protection
- Attacks: Data Exposure
- Practical
Day 3
- Secure Coding: Communication Security
- Attacks: Communication Vulnerabilities & Unsecure Traffic
- Secure Coding: System Configuration
- Attacks: System Misconfiguration
- Secure Coding: Database Security
- Attacks: Vulnerable Databases
- Secure Coding: File Management
- Attacks: File Exposure
- Secure Coding: Memory Management
- Attacks: Memory Security
- Secure Coding: General Coding Practices
- Practical
Day 4
- Exploitation: How Hackers Compromise Web Applications & Poor Coding
- Practical: Metasploitable 2
- Practical: XVWA
- Practical: BWAPP
Day 5
- Practical
- Discussion
- Conclusion
Programme scope, delivery arrangements and suitability are confirmed during enquiry.