Python Security Training in Kraków, Poland

This course focuses on securing Python applications by addressing real-world vulnerabilities and security best practices. Participants will explore common coding mistakes, secure coding patterns, and how to protect against attacks such as injection, deserialization, insecure dependencies, and more. The course combines theory, practical labs, and threat modeling with Python-specific tooling like bandit, pysa, and security testing frameworks.

Foundations of Python Security

• Introduction to Application Security in Python

• OWASP Top 10 mapped to Python vulnerabilities

• Static code analysis using bandit, flake8, and pylint

• Input validation and output encoding

Application-Level Security

• Secure authentication & password storage

• Token-based security with JWT and OAuth2

• Secure session management

• Protecting against injection attacks

• Secure logging and error handling

Advanced Topics and Secure Deployment (Optional)

• Secure dependency management (pip-audit, safety, pipenv)

• Cryptography with cryptography and PyNaCl

• Secure file handling and deserialization

• Introduction to threat modeling in Python

• Security in CI/CD: integrating Bandit, pytest, and Git hooks

Hands-on Exercises

Summary and Conclusion