CertNexus
CertNexus Cyber Secure Coder (CSC-210)
Write software that attackers cannot easily break.
3 daysIntermediate7 modulesCSC-210Cyber Secure Coder (CSC)
About this course
Write software that attackers cannot easily break. You will identify security requirements, eliminate common vulnerabilities, design securely, implement standard protections, test for weaknesses and keep deployed software secure, preparing for the Cyber Secure Coder certification.
What you'll learn
- Employ secure software development best practices
- Identify security requirements for your projects
- Eliminate vulnerabilities and misconfigurations in code
- Use a security-by-design approach to architect secure systems
- Protect users and sensitive data with common controls
- Apply testing methods to find and fix security defects
- Maintain deployed software to ensure ongoing security
Curriculum
7 modules
- Security throughout the development process
- Business, compliance, and user requirements
- Identifying factors undermining software security
- Recognizing vulnerabilities and attack patterns
- Gathering vulnerability intelligence
- Addressing software defects and misconfiguration
- Managing risks from third-party code
- Handling human factors and social engineering
- Improving development process security
- Applying secure design principles (OWASP, defense in depth, least privilege)
- Threat modeling and risk assessment
- Identifying and countering specific threats
- Secure coding best practices and checklists
- Avoiding common programming errors (buffer overflows, input validation, etc.)
- Preventing platform, privacy, and web/mobile vulnerabilities
- Access control, authentication, and session management
- Protecting data in transit and at rest (encryption, PKI)
- Secure error handling, logging, and output restrictions
- Preventing SQL injection and securing database access
- Security testing phases and strategies
- Static and dynamic code analysis
- Automated tools for vulnerability detection
- Monitoring and logging applications
- Ongoing patch management and maintenance
- Secure deprovisioning and uninstallation
Who it's for
Software developers, testers and architects in any language.
Before you start
- This course presents secure programming concepts that apply to many different types of software development projects. Although this course uses Python®, HTML, and JavaScript® to demonstrate various programming concepts, you do not need to have experience in these languages to benefit from this course. However, you should have some programming experience, whether it be developing desktop, mobile, web, or cloud applications.
Prepares for
Related courses
More in CertNexus →Foundation
DevSecOps Foundation
DevOps, Git & Automation
View course →Intermediate
EC-Council Certified Application Security Engineer (CASE).NET
EC-Council
View course →Foundation
EC-Council DevSecOps Essentials (DSE)
EC-Council
View course →AdvancedGH-500
GH-500 GitHub Advanced Security
DevOps, Git & Automation
View course →Intermediate
AI for Business Professionals (AIBIZâ„¢)
CertNexus
View course →Intermediate
AI Technologies in Media
CertNexus
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.