Ciphent.Secure Software Architecture & Design

Ciphent.Secure Software Development courses enable your software developers, application designers and data modelers, quality assurance engineers, development managers, and software penetration testers to build and implement secure software applications that in turn will save organizations considerable time, money, and resources. The Ciphent approach combines expert instruction, hands-on exercises, take-home reference guides, free books and tools, and knowledge retention tests to help drive home each course's key principles.

Ciphent.Secure Software Architecture & Design is the perfect primer for any software developer or engineer that has not taken a secure development course before. It will cover all of the intricacies of secure software design and implementation best practices in addition to covering exploit techniques. The software-based exploits that crush the big software players today to include the infamous Buffer Overflows, Cross-site Scripting Attacks, SQL Injection, Session Spoofing, and Race Conditions to mention a few will all be covered with detailed examples and case studies.

Duration:

2 days

Prequisites:

A general understanding of scripting and programming methodologies and design techniques are required for this course. While it is not required, a basic understanding of secure development practices, application hacking techniques, and general information security concepts are also welcomed.

Course Materials:

- Ciphent.Secure Student Toolkit on USB
- Buffer Overflow Attacks by Syngress
- Writing Security Tools and Exploits by Syngress
- Student Course Manuals
- A Secure Software Architecture & Design Quick Reference Guide
- Free knick-knacks

What's Learned:

- Learn the Basics of Secure Software Development
- Understand the Key Components of a Solid Development Infrastructure
- Become Familiar with Application-layer Vulnerabilities
- Create applicable tests for software vulnerabilities tests
- Understand the technical specifics of the most common software-based vulnerabilities
- Write exploits for identified code vulnerabilities
- Search for the "usual suspects" of the software vulnerability world