Customized Training in Secure Coding
More than 90% of security issues with applications arise due to poor coding practices. Fixing these vulnerabilities requires re-working the application code and sometimes, application architecture as well. A requirement defect left undetected costs 50-200 times as much later. A defect fixed in a code review would cost 10-100 times as much to fix later on." By identifying insecure coding practices and developing secure alternatives, software developers can take practical steps to reduce or eliminate vulnerabilities before deployment. Secure Coding Training for Applications takes a very pragmatic approach to the process of writing secure code. They are delivered both in a customized format or a general format and very often our trainer's present papers at reputed international seminars on the subject.
Course outline
- Introduction to application security
- Evolution of applications and threats towards applications
- Common application vulnerabilities
- Underlying principles and goals of application security
- Planning for application security
- Secure design
- Secure coding practices
- Use and abuse of Cryptography
- Logging and auditing
- Configuration management and change control
- Security testing and QA