Cybersecurity for Developers: Secure Coding

Defend your code against threats

Learn the security mindset, how to prevent threats, and how to find them.

Why Attend

This learning program is for any software developer, software tester, or software architect who wants to prevent threats and find vulnerabilities in software applications. Learn:

The mindset of security
Most common threats and vulnerabilities
Manage security risks with Threat Modeling
Apply modern design and architecture practices like Defense in Depth, Zero Trust Security, and the STRIDE model
Identify assets and use data flow diagrams to pinpoint potential vulnerabilities
Practice pen testing to step into the mindset of an attacker

Who Should Attend

All team members who want to learn how to prevent and find security issues in their products.

Practical Details

Language: English
Experiential, hands-on, interactive online learning with practical examples
Participants will be awarded a Mozaic Works certificate of completion

Duration

Format

Time

Start Date

Quantity:

- +

Agenda

Fundamentals of Software Application Security

The Need for Application Security
Understanding Attackers
Security is a Continuous Activity
Resources for Security

Common Vulnerabilities and How to Find Them

OWASP Top Ten Web Vulnerabilities
Top Mobile Vulnerabilities
Pen Testing
Preventing Vulnerabilities

Threat Modeling

How to Build a Threat Model
The STRIDE Classification of Threats
Threat Modeling with OWASP Top Ten Vulnerabilities
Architecture Implications of Threat Modeling
Code Implications of Threat Models

Threat Analysis Practices

Finding Vulnerabilities with Data Flow Diagrams
Defense In Depth Principle
Zero Trust Security Model
API Top Ten vulnerabilities

Implementation Practices for Security

Secure Coding
HTTP Security Headers
JSON Web Tokens
OWASP Application Security Verification Standard (ASVS)

More details and full agenda here.