Cyber Secure Coder (CSC-110)

Name: Cyber Secure Coder (CSC-110)
Rating: 4.2 (19 reviews)

Certificate Exam Preparatory Course

Created byStone River eLearning

Last updated 6/2023

English

What you'll learn

Understand the importance of secure coding practices in software development.
Identify common vulnerabilities and threats in software applications.
Learn secure coding principles and best practices.
Develop skills to write secure code for various programming languages.
Implement secure coding techniques to protect against common attacks.
Apply security controls to ensure data confidentiality, integrity, and availability.

Course content

6 sections • 49 lectures • 9h 57m total length

Overview4:20
Prior Knowledge and Expectations4:50
Gather Software Requirements13:17
Assignment: Identity Requirements2:06
Activity: Identify Requirements8:18
Factors that Undermine Software Security10:39
Software Vulnerabilities and Attack Phases9:38
Attack Patterns19:18
Explore reconnaissance and attacker patterns, including port checks and version discovery via headers, brute force, authentication bypass, and input validation flaws, with practical defense for robust software.
Assignment: Find Vulnerabilities3:08
Activity: Find Vulnerabilities10:18
Assignment: New Password Requirements3:12
Activity: New Password Requirements9:22
Assignment: Hashing Passwords3:42
Activity: Hashing Passwords19:01
Vulnerability Intelligence13:13
Assignment: Vulnerability Search4:02
Activity: Vulnerability Search15:31

Bugs in Software14:11
External Libraries and Services16:44
Navigate secure software development with external libraries and cloud services, and vet third-party modules, open-source risks, encryption, and least privilege to prevent data exposure.
Handling Errors Securely17:28
Human-Related Security15:39
Security Requirements and Design10:34
Define security requirements and design using the CIA triad—confidentiality, integrity, and availability—while ensuring secure connections, input validation, and a symbiotic, focused, complete, unitary, and measurable approach.
Security Through the Software Lifecycle17:00
Assignment: Exploring Leftover Artifacts2:07
Activity: Exploring Leftover Artifacts14:01

Principles of Secure Design13:26
Avoid Common Mistakes16:06
Assignment: Common Security Design Flaws4:25
Activity: Common Security Design Flaws16:19
Examine common security design flaws in a deliberately unsafe app, highlighting authentication and authorization weaknesses, hard-coded credentials, insecure hashing, SQL injection risks, and insecure secret management.
Understand Risk and Threats13:06
Risk Response Strategies12:30
Explore four risk response strategies—risk avoidance, risk transfer, risk mitigation, and risk acceptance—to manage cybersecurity risks. See practical examples like outsourcing authentication and input sanitization, with cost-based decision making.
Exploit Countermeasures13:57

Guidelines for Secure Coding14:17
Buffer Overflows and Prevention13:08
Race Conditions10:09
Assignment Using Locks Remediate Race Condition5:54
Explore how a race condition arises in Python by using threading to increment a global hits dictionary. See how unsynchronized access across 10 threads leads to the last writer wins.
Activity Using Locks to Remediate Race Condition8:52
learn how to remediate race conditions by using locks for synchronization, including a threading.lock example and the context manager approach, and explore related concurrency primitives.
OWASP Top Ten Platform Vulnerabilities10:28
Explore the OWASP top 10 platform vulnerabilities across web, IoT, and mobile. The lecture highlights injection, cross site scripting, broken access control, data exposure, insecure data storage, and secure updates.
Web Application Vulnerabilities Deep Dive16:50
Mobile Application Vulnerabilities Deep Dive16:17
IoT Vulnerabilities Deep Dive19:00
Desktop Vulnerabilities Deep Dive13:37
Explore desktop vulnerabilities in cross-platform apps, including dynamic linking, dll injection, and shell code risks. Learn to mitigate with input validation, encryption, signing, and safe debugging practices.
Privacy Vulnerability Defects20:41

Requirements

There are no specific prerequisites for this course. However, a basic understanding of software development concepts and experience with programming languages would be beneficial.

Description

The Cyber Secure Coder (CSC-110) course is designed to provide participants with a comprehensive understanding of secure coding practices and principles. This course focuses on equipping individuals with the necessary knowledge and skills to develop secure software applications, with an emphasis on mitigating common vulnerabilities and ensuring data confidentiality, integrity, and availability.

Cyber Secure Coder will aid in developing an appropriate understanding of secure development practices and how those practices protect against various types of vulnerabilities. You will learn the types of vulnerabilities, the exploits that can occur from those vulnerabilities, and the programming practices that will help prevent exploitation in an application.

By the end of the Cyber Secure Coder (CSC-110) course, participants will have the necessary skills to develop secure software applications and integrate security practices throughout the software development life cycle. They will be able to identify and mitigate common vulnerabilities, ensuring the confidentiality, integrity, and availability of data.

Understand the importance of secure coding practices in software development.
Identify common vulnerabilities and threats in software applications.
Learn secure coding principles and best practices.
Develop skills to write secure code for various programming languages.
Implement secure coding techniques to protect against common attacks.
Apply security controls to ensure data confidentiality, integrity, and availability.
Learn how to conduct security testing and code reviews to identify vulnerabilities.
Understand the legal and ethical aspects of secure coding.

Who this course is for:

Software Developers
Web Application Developers
Mobile Application Developers
Software Architects
Quality Assurance/Test Engineers
IT Professionals
Security Professionals
Students and Researchers

Cyber Secure Coder (CSC-110)

What you'll learn

Explore related topics

Course content

Security in Software17 lectures • 2hr 34min

Handling Vulnerabilities8 lectures • 1hr 48min

Designing for Security7 lectures • 1hr 30min

Developing Secure Code11 lectures • 2hr 29min

Implementing Common Protections4 lectures • 59min

Testing and Maintaining Software Security2 lectures • 37min

Requirements

Description

Who this course is for: