Course Outline
Introduction to Application Security
- Importance of application security in modern software development
- Overview of common cyber threats and attack vectors
- Understanding security risks in web and mobile applications
Secure Software Development Lifecycle (SDLC)
- Integrating security into each phase of development
- Threat modeling and risk assessment
- Automated security testing in CI/CD pipelines
Understanding Common Security Vulnerabilities
- Introduction to OWASP Top 10 security risks
- Common coding flaws that lead to vulnerabilities
- Exploiting insecure applications (hands-on exercises with DVWA/WebGoat)
Input Validation and Secure Coding Practices
- Preventing SQL injection, cross-site scripting (XSS), and command injection
- Best practices for input sanitization and validation
- Implementing secure authentication and authorization mechanisms
Session Management and Data Protection
- Handling session security: cookies, tokens, and JWT best practices
- Data encryption techniques and secure storage
- Secure API development and protection against API abuses
Security Testing and Vulnerability Assessment
- Using OWASP ZAP and Burp Suite for security testing
- Static and dynamic application security testing (SAST/DAST)
- Penetration testing fundamentals for developers
Implementing Secure DevOps (DevSecOps)
- Security automation in DevOps workflows
- Container security and securing cloud applications
- Incident response and security monitoring
Summary and Next Steps
- Key takeaways from the course
- Resources for further learning
- Q&A and closing remarks
Requirements
- Basics of any programming language
- Experience in developing applications
Audience
- Software developers
- Application security engineers
- DevOps and security teams
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 4800 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (2)
The different type of attacks to expose or create web vulnerabilities, how can I prevent them, and what tool/s I can use to ensure that the application I am developing is secured and will be difficult to hack.
Glyssa Mae Betonio - Metropolitan Bank and Trust Company
Course - Application Security for Developers
Lot's of information explained very well. Good examples, interesting exercises. Trainer showed us his real world experience.
