Course details

Defensive Programmer: Defensive Concepts

Defensive Programmer: Defensive Concepts


Overview/Description
Expected Duration
Lesson Objectives
Course Number
Expertise Level



Overview/Description

Explore key defensive programming concepts including the Cert Top 10 practices for secure coding, along with other topics covered in this 9-video course. To begin, take a look at the general defense coding concepts, the basic concepts and principles that permeate defensive programming. The next two-part tutorial concerns CERT top 10 secure coding practices: Part A on the first five CERT top 10 secure coding practices—validate input, Heed compiler warnings, Architect and design for security, keep it simple, and the default deny. Part B covers the last five CERT top 10 secure coding practices—adhere to the principles of least privilege, sanitize data sent to other systems, practice defense in depth, use effective quality assurance techniques, and adopt a secure coding standard. This leads learners into learning how to apply defensive coding; using Open Source Security Testing Methodology Manual concepts for secure testing, and applying the Flaw Hypothesis Method. The final tutorial in this course looks at the role of Six Sigma in producing better quality, secure programming.



Expected Duration (hours)
0.7

Lesson Objectives

Defensive Programmer: Defensive Concepts

  • discover the key concepts covered in this course
  • identify general defensive concepts
  • describe the first five CERT Top 10 secure coding practices - Validate input, Heed compiler warnings, Architect and design for security, Keep it simple, and the Default deny
  • describe the last five CERT Top 10 secure coding practices - Adhere to the principle of least privilege, Sanitize data sent to other systems, Practice defense in depth, Use effective quality assurance techniques, and Adopt a secure coding standard
  • apply defensive coding
  • use Open Source Security Testing Methodology Manual concepts
  • apply the Flaw Hypothesis Method
  • describe the role of Six Sigma in producing better quality, secure programming
  • summarize the key concepts covered in this course
  • Course Number:
    it_spdfpgdj_01_enus

    Expertise Level
    Beginner