Application and Software Security 10th February – 31st of March 2025

Course Overview:

This course aims to equip participants with the knowledge and tools to identify, assess, and address software security vulnerabilities throughout the software development lifecycle (SDLC).

Course Objectives:

By the end of this course, participants will be able to:

1. Understand Software Security Principles:

• Learn secure coding practices and the importance of application security.

2. Identify Software Vulnerabilities:

• Detect common vulnerabilities like SQL injection, XSS, CSRF, and buffer overflow.

3. Implement Secure Software Development:

• Integrate security into each phase of the SDLC.

4. Conduct Application Security Testing:

• Use tools for static and dynamic application security testing.

5. Mitigate Application Security Risks:

• Apply best practices to secure applications.

Course Contents:

Module 1: Introduction to Application Security

• Importance of software security

• Threats to software applications

Module 2: Secure Software Development Lifecycle (SDLC)

• Secure coding standards

• Integrating security into development processes

Module 3: Common Application Vulnerabilities

• OWASP Top 10 vulnerabilities

• Case studies

Module 4: Security Testing Techniques

• Static analysis

• Dynamic analysis

• Penetration testing

Module 5: Web and Mobile Application Security

• Securing web applications

• Mobile application security best practices

Module 6: Vulnerability Management and Remediation

• Vulnerability scanning tools

• Patching and secure updates

Module 7: Application Security Best Practices

• Secure design principles

• Access control and authentication

Target Audience:

• Software Developers

• Application Security Engineers

• QA Testers

• IT Security Professionals