Ready to learn · Level 3 · 6 points
Secure Software Development
Writing software that resists attack: threat modelling, common vulnerabilities and secure coding.
Prerequisites: no set prerequisites
What you'll learn (10 topics)
- Threat modelling: STRIDE, boundaries and defensive controls
- Dynamic memory: malloc, free and leaks
- Secure coding: validation, sizes and memory boundaries
- Database access from code: connections, ORMs, parameters and races
- Common vulnerabilities: injection, XSS and object permissions
- Sessions, cookies and authentication boundaries
- Application cryptography and key lifecycles
- Coverage criteria
- Security testing and verification evidence
- Security principles and least-privilege workflows
