Programming Foundations: Secure Coding

Introduction

• Introduction

1. Security and Risk Overview

• The goals of secure coding
• Understand the attacker
• Threat modeling
• Understand your risks
• Break what you build
• Document what you understand
• Introduction to vulnerabilities

2. Web-Based Client Server Issues

• Input validation
• Communication channel
• Session management

3. Thick Application and Client Server Issues

• Error handling
• Logging and output
• Internal data management
• Configuration
• Database
• File and I/O
• Memory management
• Dependencies

4. Embedded Device and IoT Issues

• Physical security
• Side channel
• Memory
• Software versioning
• Third-party components

5. Security and Cryptography Misuse Issues

• Authentication and password
• Authorization and access control
• Cryptography

6. Security in the SDLC

• Requirements
• Design
• Development
• Testing
• Deployment
• Operations
• Containerization concerns
• Best practices

7. Conclusion

• Next steps