Skip to content

Pages

Courses

ALL COURSES

Resources

ALL RESOURCES

Blogs

ALL BLOGS
Use coupon code LEARN21 at checkout for 21% off any course. Valid through 9/30/21.
*Offer excludes Scaled Agile (SAFe®) courses, CSP-SM and private team training.

Fundamentals of Secure Application Development

Application developers often aren’t trained in security, yet the vast majority of breaches are related to the application layer. Learn secure development best practices that keep software safe.

The vast majority of hacks are not due to insecure networks or misconfigured firewalls; they are a result of common software flaws that get coded into applications. Even with good information security policy and staff, the reality is that software developers are often underserved when it comes to security strategy. If their applications get built without attention to good software security practices, the risk gets passed downstream and by the time an incident occurs, it’s too late to be proactive.

From proactive requirements to coding and testing, this information security training course covers the best practices any software developer needs to avoid opening up their users, customers, and organization to attack at the application layer. We teach only constantly updated best practices, and our experts answer your questions live in class. Return to work ready to build higher quality, more robustly protected applications.

Available formats for this course
In-Person
Live Online
Private Team Training
Duration
2 days/16 hours of instruction
Education Credits
14 PDUs
14 Technical PDUs
1 RMP PDUs
14 PDUs
Public Classroom Pricing

Starting at: $1295(USD)

$1650(CAD)

GSA Price: $1185

Group Rate: $1195

Get the full details on this course. Download the .PDF Brochure below:

Part 1: Secure Software Development

  1. Assets, Threats & Vulnerabilities
  2. Security Risk Analysis (Bus & Tech)
  3. Secure Dev Processes (MS, BSI…)
  4. Defense in Depth
  5. Approach for this course

Introductory Case Study

Part 2: The Context for Secure Development

  1. Assets to be protected
  2. Threats Expected
  3. Security Imperatives (int&external)
  4. Organization's Risk Appetite
  5. Security Terminology
  6. Organizational Security Policy
  7. Security Roles and Responsibilities
  8. Security Training for Roles
  9. Generic Security Goals & Requirements

Exercise: Our Own Security Context

Part 3: Security Requirements

  1. Project-Specific Security Terms
  2. Project-Related Assets & Security Goals
  3. Product Architecture Analysis
  4. Use Cases & MisUse/Abuse Cases
  5. Dataflows with Trust Boundaries
  6. Product Security Risk Analysis
  7. Elicit, Categorize, Prioritize SecRqts
  8. Validate Security Requirements

Exercise: Managing Security Requirements

Part 4: Designing Secure Software

  1. High-Level Design
    1. Architectural Risk Analysis
    2. Design Requirements
    3. Analyze Attack Surface
    4. Threat Modeling
    5. Trust Boundaries
    6. Eliminate Race Objects
  2. Detail-Level Design
    1. Secure Design Principles
    2. Use of Security Wrappers
    3. Input Validation
    4. Design Pitfalls
    5. Validating Design Security
    6. Pairing Mem Mgmt Functions
    7. Exclude User Input from format strings
    8. Canonicalization
    9. TOCTOU
    10. Close Race Windows
    11. Taint Analysis

Exercise: A Secure Software Design, Instructor Q and A

Part 5: Writing Secure Code

  1. Coding
    1. Developer guidelines & checklists
    2. Compiler Security Settings (per)
    3. Tools to use
    4. Coding Standards (per language)
    5. Common pitfalls (per language)
    6. Secure/Safe functions/methods
      1. Stack Canaries
      2. Encrypted Pointers
      3. Memory Initialization
      4. Function Return Checking (e.e. malloc)
      5. Dereferencing Pointers
    7. Integer type selection
      1. Range Checking
      2. Pre/post checking
    8. Synchronization Primitives
  2. Early Verification
    1. Static Analysis (Code Review w/tools)
    2. Unit & Dev Team Testing
    3. Risk-Based Security Testing
    4. Taint Analysis

Exercise: Secure Coding Q and A

Part 6: Testing for Software Security

  1. Assets to be protected
  2. Threats Expected
  3. Security Imperatives (int&external)
  4. Organization's Risk Appetite
  5. Static Analysis
  6. Dynamic Analysis
  7. Risk-Based Security testing
  8. Fuzz Testing (Whitebox vs Blackbox)
  9. Penetration Testing (Whitebox vs Blackbox)
  10. Attack Surface Review
  11. Code audits
  12. Independent Security Review

Exercise: Testing Software for Security

Part 7: Releasing & Operating Secure Software

  1. Incident Response Planning
  2. Final Security Review
  3. Release Archive
  4. OS Protections:
    1. Address Space Layout Randomization
    2. Non-Executable Stacks
    3. W^X
    4. Data Execution Prevention
  5. Monitoring
  6. Incident Response
  7. Penetration Testing

Exercise: A Secure Software Release

Part 8: Making Software Development More Secure

  1. Process Review
  2. Getting Started
  3. Priorities

Exercise: Your Secure Software Plan

Professionals who may benefit include:

  • Application Development Managers
  • Software Engineers and Developers
  • CISOs, CISAs and Security Professionals
  • Software Testers
  • QA Managers, Directors, and Staff
  • Test Management
  • Business Analysts
  • Project Managers
  • IT Specialists (Security, Capacity Management, Networking…)

  • Understand assets, threats, vulnerabilities, and risks
  • Gather and understand security requirements
  • Design secure software
  • Write secure code
  • Test your software for security
  • Release & operate secure software

Fundamentals of Secure Application Development Schedule

Location
Date
Register
CPSFDC\Entity\Session::__set_state(array( 'entitySanitizer' => 'CPSFDC\\Utils\\Sanitizers\\SessionSanitizer', 'sfId' => 'a011G00000VNV4zQAH', 'startDate' => '2021-08-10', 'startTime' => '8:30 AM', 'endDate' => '2021-08-11', 'endTime' => '4:30 PM', 'name' => '628005VCL03', 'standardCourseFee' => '1295', 'standardCourseFeeCAD' => '1650', 'standardCourseFeeEUR' => '1175', 'courseId' => 'APPSECFUNDS', 'course' => 'a00370000029ujrAAA', 'courseSfId' => 'a00370000029ujrAAA', 'courseName' => 'Fundamentals of Secure Application Development', 'instructorId' => '85388', 'instructorSfId' => 'a0237000001Y4RDAA0', 'instructorDisplayName' => 'TBD', 'instructorName' => 'TBD', 'locationCode' => 'VCL', 'sessionStatus' => 'O', 'city' => 'Live Online Training', 'state' => '', 'cityState' => 'Live, Online Training', 'locationSfId' => 'a0637000000tn2hAAA', 'subjectSfId' => 'a051G00000Jsm8uQAB', 'subjectName' => 'Cybersecurity', 'specialitySfId' => 'a051G00000Jsm8zQAB', 'specialityName' => 'Application Security', 'expertiseSfId' => '', 'expertiseName' => NULL, 'certificationSfId' => NULL, 'certificationBody' => '', 'certificationName' => '', 'pdus' => '14', 'deliveryModalities' => 'In-Person;Live Online', 'fullFacilityAddress' => 'Live Instructor-Led Online Training
Please call Cprime for location details
at 1-877-800-5221
, LOL', 'gtr' => '', ))
Live, Online Training
Aug 10th - 11th 8:30 AM - 4:30 PM ET
$1295(usd)
CPSFDC\Entity\Session::__set_state(array( 'entitySanitizer' => 'CPSFDC\\Utils\\Sanitizers\\SessionSanitizer', 'sfId' => 'a011G00000VNV5rQAH', 'startDate' => '2021-09-13', 'startTime' => '8:30 AM', 'endDate' => '2021-09-14', 'endTime' => '4:30 PM', 'name' => '628005VCL04', 'standardCourseFee' => '1295', 'standardCourseFeeCAD' => '1650', 'standardCourseFeeEUR' => '1175', 'courseId' => 'APPSECFUNDS', 'course' => 'a00370000029ujrAAA', 'courseSfId' => 'a00370000029ujrAAA', 'courseName' => 'Fundamentals of Secure Application Development', 'instructorId' => '85388', 'instructorSfId' => 'a0237000001Y4RDAA0', 'instructorDisplayName' => 'TBD', 'instructorName' => 'TBD', 'locationCode' => 'VCL', 'sessionStatus' => 'O', 'city' => 'Live Online Training', 'state' => '', 'cityState' => 'Live, Online Training', 'locationSfId' => 'a0637000000tn2hAAA', 'subjectSfId' => 'a051G00000Jsm8uQAB', 'subjectName' => 'Cybersecurity', 'specialitySfId' => 'a051G00000Jsm8zQAB', 'specialityName' => 'Application Security', 'expertiseSfId' => '', 'expertiseName' => NULL, 'certificationSfId' => NULL, 'certificationBody' => '', 'certificationName' => '', 'pdus' => '14', 'deliveryModalities' => 'In-Person;Live Online', 'fullFacilityAddress' => 'Live Instructor-Led Online Training
Please call Cprime for location details
at 1-877-800-5221
, LOL', 'gtr' => '', ))
Live, Online Training
Sep 13th - 14th 8:30 AM - 4:30 PM ET
$1295(usd)
CPSFDC\Entity\Session::__set_state(array( 'entitySanitizer' => 'CPSFDC\\Utils\\Sanitizers\\SessionSanitizer', 'sfId' => 'a011G00000VNV6VQAX', 'startDate' => '2021-09-28', 'startTime' => '8:30 AM', 'endDate' => '2021-09-29', 'endTime' => '4:30 PM', 'name' => '628005VCL05', 'standardCourseFee' => '1295', 'standardCourseFeeCAD' => '1650', 'standardCourseFeeEUR' => '1175', 'courseId' => 'APPSECFUNDS', 'course' => 'a00370000029ujrAAA', 'courseSfId' => 'a00370000029ujrAAA', 'courseName' => 'Fundamentals of Secure Application Development', 'instructorId' => '85388', 'instructorSfId' => 'a0237000001Y4RDAA0', 'instructorDisplayName' => 'TBD', 'instructorName' => 'TBD', 'locationCode' => 'VCL', 'sessionStatus' => 'O', 'city' => 'Live Online Training', 'state' => '', 'cityState' => 'Live, Online Training', 'locationSfId' => 'a0637000000tn2hAAA', 'subjectSfId' => 'a051G00000Jsm8uQAB', 'subjectName' => 'Cybersecurity', 'specialitySfId' => 'a051G00000Jsm8zQAB', 'specialityName' => 'Application Security', 'expertiseSfId' => '', 'expertiseName' => NULL, 'certificationSfId' => NULL, 'certificationBody' => '', 'certificationName' => '', 'pdus' => '14', 'deliveryModalities' => 'In-Person;Live Online', 'fullFacilityAddress' => 'Live Instructor-Led Online Training
Please call Cprime for location details
at 1-877-800-5221
, LOL', 'gtr' => '', ))
Live, Online Training
Sep 28th - 29th 8:30 AM - 4:30 PM ET
$1295(usd)
CPSFDC\Entity\Session::__set_state(array( 'entitySanitizer' => 'CPSFDC\\Utils\\Sanitizers\\SessionSanitizer', 'sfId' => 'a011G00000VNTtKQAX', 'startDate' => '2021-10-06', 'startTime' => '8:30 AM', 'endDate' => '2021-10-07', 'endTime' => '4:30 PM', 'name' => '628006VCL', 'standardCourseFee' => '1295', 'standardCourseFeeCAD' => '1650', 'standardCourseFeeEUR' => '1175', 'courseId' => 'APPSECFUNDS', 'course' => 'a00370000029ujrAAA', 'courseSfId' => 'a00370000029ujrAAA', 'courseName' => 'Fundamentals of Secure Application Development', 'instructorId' => '85388', 'instructorSfId' => 'a0237000001Y4RDAA0', 'instructorDisplayName' => 'TBD', 'instructorName' => 'TBD', 'locationCode' => 'VCL', 'sessionStatus' => 'O', 'city' => 'Live Online Training', 'state' => '', 'cityState' => 'Live, Online Training', 'locationSfId' => 'a0637000000tn2hAAA', 'subjectSfId' => 'a051G00000Jsm8uQAB', 'subjectName' => 'Cybersecurity', 'specialitySfId' => 'a051G00000Jsm8zQAB', 'specialityName' => 'Application Security', 'expertiseSfId' => '', 'expertiseName' => NULL, 'certificationSfId' => NULL, 'certificationBody' => '', 'certificationName' => '', 'pdus' => '14', 'deliveryModalities' => 'In-Person;Live Online', 'fullFacilityAddress' => 'Live Instructor-Led Online Training
Please call Cprime for location details
at 1-877-800-5221
, LOL', 'gtr' => '', ))
Live, Online Training
Oct 6th - 7th 8:30 AM - 4:30 PM ET
$1295(usd)
CPSFDC\Entity\Session::__set_state(array( 'entitySanitizer' => 'CPSFDC\\Utils\\Sanitizers\\SessionSanitizer', 'sfId' => 'a011G00000VNTuMQAX', 'startDate' => '2021-11-09', 'startTime' => '8:30 AM', 'endDate' => '2021-11-10', 'endTime' => '4:30 PM', 'name' => '628006VCL02', 'standardCourseFee' => '1295', 'standardCourseFeeCAD' => '1650', 'standardCourseFeeEUR' => '1175', 'courseId' => 'APPSECFUNDS', 'course' => 'a00370000029ujrAAA', 'courseSfId' => 'a00370000029ujrAAA', 'courseName' => 'Fundamentals of Secure Application Development', 'instructorId' => '85388', 'instructorSfId' => 'a0237000001Y4RDAA0', 'instructorDisplayName' => 'TBD', 'instructorName' => 'TBD', 'locationCode' => 'VCL', 'sessionStatus' => 'O', 'city' => 'Live Online Training', 'state' => '', 'cityState' => 'Live, Online Training', 'locationSfId' => 'a0637000000tn2hAAA', 'subjectSfId' => 'a051G00000Jsm8uQAB', 'subjectName' => 'Cybersecurity', 'specialitySfId' => 'a051G00000Jsm8zQAB', 'specialityName' => 'Application Security', 'expertiseSfId' => '', 'expertiseName' => NULL, 'certificationSfId' => NULL, 'certificationBody' => '', 'certificationName' => '', 'pdus' => '14', 'deliveryModalities' => 'In-Person;Live Online', 'fullFacilityAddress' => 'Live Instructor-Led Online Training
Please call Cprime for location details
at 1-877-800-5221
, LOL', 'gtr' => '', ))
Live, Online Training
Nov 9th - 10th 8:30 AM - 4:30 PM ET
$1295(usd)
CPSFDC\Entity\Session::__set_state(array( 'entitySanitizer' => 'CPSFDC\\Utils\\Sanitizers\\SessionSanitizer', 'sfId' => 'a011G00000VNTuoQAH', 'startDate' => '2021-11-15', 'startTime' => '8:30 AM', 'endDate' => '2021-11-16', 'endTime' => '4:30 PM', 'name' => '628006VCL03', 'standardCourseFee' => '1295', 'standardCourseFeeCAD' => '1650', 'standardCourseFeeEUR' => '1175', 'courseId' => 'APPSECFUNDS', 'course' => 'a00370000029ujrAAA', 'courseSfId' => 'a00370000029ujrAAA', 'courseName' => 'Fundamentals of Secure Application Development', 'instructorId' => '85388', 'instructorSfId' => 'a0237000001Y4RDAA0', 'instructorDisplayName' => 'TBD', 'instructorName' => 'TBD', 'locationCode' => 'VCL', 'sessionStatus' => 'O', 'city' => 'Live Online Training', 'state' => '', 'cityState' => 'Live, Online Training', 'locationSfId' => 'a0637000000tn2hAAA', 'subjectSfId' => 'a051G00000Jsm8uQAB', 'subjectName' => 'Cybersecurity', 'specialitySfId' => 'a051G00000Jsm8zQAB', 'specialityName' => 'Application Security', 'expertiseSfId' => '', 'expertiseName' => NULL, 'certificationSfId' => NULL, 'certificationBody' => '', 'certificationName' => '', 'pdus' => '14', 'deliveryModalities' => 'In-Person;Live Online', 'fullFacilityAddress' => 'Live Instructor-Led Online Training
Please call Cprime for location details
at 1-877-800-5221
, LOL', 'gtr' => '', ))
Live, Online Training
Nov 15th - 16th 8:30 AM - 4:30 PM ET
$1295(usd)
CPSFDC\Entity\Session::__set_state(array( 'entitySanitizer' => 'CPSFDC\\Utils\\Sanitizers\\SessionSanitizer', 'sfId' => 'a011G00000VNTvvQAH', 'startDate' => '2021-12-07', 'startTime' => '8:30 AM', 'endDate' => '2021-12-08', 'endTime' => '4:30 PM', 'name' => '628006VCL04', 'standardCourseFee' => '1295', 'standardCourseFeeCAD' => '1650', 'standardCourseFeeEUR' => '1175', 'courseId' => 'APPSECFUNDS', 'course' => 'a00370000029ujrAAA', 'courseSfId' => 'a00370000029ujrAAA', 'courseName' => 'Fundamentals of Secure Application Development', 'instructorId' => '85388', 'instructorSfId' => 'a0237000001Y4RDAA0', 'instructorDisplayName' => 'TBD', 'instructorName' => 'TBD', 'locationCode' => 'VCL', 'sessionStatus' => 'O', 'city' => 'Live Online Training', 'state' => '', 'cityState' => 'Live, Online Training', 'locationSfId' => 'a0637000000tn2hAAA', 'subjectSfId' => 'a051G00000Jsm8uQAB', 'subjectName' => 'Cybersecurity', 'specialitySfId' => 'a051G00000Jsm8zQAB', 'specialityName' => 'Application Security', 'expertiseSfId' => '', 'expertiseName' => NULL, 'certificationSfId' => NULL, 'certificationBody' => '', 'certificationName' => '', 'pdus' => '14', 'deliveryModalities' => 'In-Person;Live Online', 'fullFacilityAddress' => 'Live Instructor-Led Online Training
Please call Cprime for location details
at 1-877-800-5221
, LOL', 'gtr' => '', ))
Live, Online Training
Dec 7th - 8th 8:30 AM - 4:30 PM ET
$1295(usd)

Request Private Team Training