SECURE CODING — SECURITY BY DESIGN + PRIVACY BY DEFAULT
Secure Coding is part of the “Security by Design” and “Privacy by Design and Default” strategy and a necessary prerequisite for the development of secure software. Secure coding should already be taken into account accordingly in the planning phase of new products with software components. In practice, unfortunately, security-critical errors are far too often only discovered in the course of penetration tests or through successful hacking attacks. The elimination of these errors, most of which could have been avoided, usually causes higher costs than secure coding.
In an individual customer workshop, we provide a comprehensive overview of the topic of “Secure Coding”. Starting with the requirements or the elaboration of Secure Coding standards up to the actual application in daily practice. Using numerous practical examples, we teach the development team the correct procedure and the team can apply the knowledge they have gained to their own projects.
Workshop Content
- Basics of Secure Coding
- Typical application vulnerabilities and causes, e.g.
- missing input validation
- Use of uninitialized data structures
- Execution of functions
- Risk assessment
- Overview of standards and organizations, e.g. OWASP
- Development of secure coding standards for own projects
- Practical examples and pitfalls based on concrete examples in different programming languages
- Good practice and success factors
- Importance of penetration tests and code reviews
Goal
You will learn about the challenges and success factors of secure coding and will be able to assess typical vulnerabilities and mitigate their risks through appropriate programming. You know the importance of secure coding standards and are able to develop and apply them.
Optimal mixed target group
- Project manager
- Development managers
- Software architects
- Software developers
- Testers
- Test manager
- Quality manager
YOUR ADVANTAGES
- Secure design of products and software
- Implementation of “Security by Design”, “Privacy by Design” and “Privacy by Default”.
- Sensitization of development teams for data protection and IT security
- Learning of security standards and secure coding best practices
- Cost savings through effective and efficient design in the planning phase
Questions about Secure Coding? Would you like to talk to an expert?