
In this lesson, we take a look at what we mean by vulnerability and how that applies to software.
Impact is what happens when a vulnerability is exploited, understanding impact is key to understand why security matters in software.
Not all risks are equal. In this lesson we take a look at how risk is calculated and how you can prioritise which risks you address.
So, who would want to attack your software and systems? In this lesson we take a look at threat actors and how you can use them to make software security personal.
Why would individuals or groups want to attack software systems? In this lesson, we take a look at the common motivations behind attacks and what it means for your applications.
Closely linked with motivation is the idea that everything has value to somebody. In this lesson we will look at identifying what has value in your system so you can prioritise your defenses.
If defense were easy, we would all have perfectly secure systems. Sadly this isn't the case. In this lesson, we look at why defending software is hard but more importantly, why it's important that we try.
So, you want to help your organization build secure software! Amazing. In this lesson, we will take a look at how you can get started with secure development.
Security isn’t just about tools and vulnerabilities.
Security is a very human field, born from the idea that everything has value, and some people will go to great lengths to acquire that value for themselves. We are vulnerable in every aspect of our lives. Despite this, we have developed ways to understand, respond to, and manage these risks – allowing us to live, work and play without fear.
Application security (and secure development) is all about understanding our systems' risks and how we can protect our people, data, and systems.
In this course, we will examine some of the key concepts that underpin security and why they matter when it comes to protecting our systems and applications.
We will look at:
➤ Understanding and calculating security risk and its impact on our people, data and systems.
➤ Identifying the groups and individuals that threaten our security, what drives them and how we can use this information to plan our defenses.
➤ The challenges with defending applications and organizations and the steps you can take to become a security champion.
This course is an essential foundation for roles in the software team and will help engineers of all levels understand and apply key application security concepts.