Secure Code Writing Fundamentals Training in Cork, Ireland

This course equips developers with the knowledge and tools necessary to write secure software applications. It focuses on common security vulnerabilities, secure coding principles, best practices across various languages and platforms, and the importance of integrating security throughout the software development lifecycle (SDLC). The course includes hands-on exercises, real-world scenarios, and guidance on avoiding security pitfalls from the start of development.

Course Agenda

Introduction to Secure Coding

• Why security matters in software development

• Secure SDLC overview

• Threat landscape and real-world breaches

Understanding OWASP Top 10

• Common web application vulnerabilities

• Examples and demonstrations

• Preventive coding practices

Input Validation & Output Encoding

• Validating user inputs safely

• Preventing injection attacks

• Encoding techniques (HTML, URL, JavaScript)

Authentication & Authorization

• Secure login implementation

• Multi-factor authentication

• Role-based and attribute-based access control

Secure Session Management

• Managing cookies and session tokens

• Preventing session hijacking and fixation

Secure Data Handling

• Data encryption at rest and in transit

• Using secure libraries and APIs

• Avoiding information leakage

Error Handling & Logging

• Secure error messages

• Logging sensitive data safely

• Log monitoring and anomaly detection

Secure File Uploads and Deserialization

• File size/type restrictions

• Avoiding insecure deserialization attacks

Secure API Development

• API authentication and authorization

• Rate limiting and input validation

• Secure REST and GraphQL practices

Secure Coding in Practice

• Secure coding guidelines in popular languages

• Static code analysis tools (e.g., SonarQube, Fortify)

• Secure DevOps principles

Code Review and Threat Modeling

• Manual code review techniques

• Using threat modeling tools (e.g., STRIDE, DFDs)

• Security testing in CI/CD

Hands-on Exercises