This course focuses on secure coding practices and the analysis of source code vulnerabilities using the OWASP Top 10. Participants will learn how to conduct static code analysis to detect and address coding flaws like injection vulnerabilities, improper error handling, and insecure configurations. The course also covers the use of security-focused static analysis tools and how to integrate secure coding practices into the software development lifecycle (SDLC).
Key Learning Outcomes:
- Detect and fix code-level vulnerabilities using static analysis tools.
- Understand common coding vulnerabilities such as SQL injection, hardcoded passwords, and insecure deserialization.
- Learn secure coding standards and best practices.
- Use tools like SonarQube, Fortify SCA, and Checkmarx for security analysis.
Detailed OWASP Top 10:
- A01:2021 - Insecure Coding Practices
- A02:2021 - Insufficient Cryptography
- A03:2021 - Improper Error Handling
- A04:2021 - Injection Flaws (SQL, OS, etc.)
- A05:2021 - Insecure Deserialization
- A06:2021 - Cross-Site Scripting (XSS)
- A07:2021 - Broken Authentication
- A08:2021 - Insecure Configuration
- A09:2021 - Hardcoded Secrets/Passwords
- A10:2021 - Insecure Libraries and Dependencies
Courses | |
Duration | 4 days |
Level | Intermediate |
Outcome | Participants will learn how to perform static code analysis, detect coding flaws, and apply secure coding practices to prevent vulnerabilities. |