tops19504245

This lecture is designed to be easily understood even if you have no prior knowledge of Secure Coding. After covering fundamental secure coding concepts, it focuses on web service security. This course was originally conducted as a special lecture hosted by OO University. It provides over 160 source codes with extensive comments, pinpointing core topics and techniques that can be applied immediately in the field.

arigaram

Breaking Down Secure Coding

보안교육

실습 중심

입문

초급

중급이상

Penetration Testing

security

security training

<1st Edition> Course Guide (To be deleted upon completion of the 2nd Edition course below)

<2nd Edition> Section 1. Course Information

<1st Edition> [Secure Coding Overview and Basics] Importance of Secure Coding (Scheduled to be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 2. [Secure Coding Overview and Basics] Importance of Secure Coding

<1st Edition> [Secure Coding Overview and Basics] Threat Modeling (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 3. [Secure Coding Overview and Basics] Threat Modeling

<1st Edition> [Secure Coding Overview and Basics] Coding Standards and Guidelines (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 4. [Secure Coding Overview and Basics] Coding Standards and Guidelines

<1st Edition> [Secure Coding Overview and Basics] Basic Practice - Safe Input Handling (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 5. [Secure Coding Overview and Basics] Basic Practice - Secure Input Handling

<1st Edition> [Security Vulnerabilities and Countermeasures by Language] Overview of Security Vulnerabilities by Language (Scheduled to be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 6. [Security Vulnerabilities and Countermeasures by Language] Overview of Security Vulnerabilities by Language

<1st Edition> [Security Vulnerabilities and Countermeasures by Language] C/C++ Secure Coding (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 7. [Security Vulnerabilities and Countermeasures by Language] Secure Coding in C and C++

<1st Edition> [Security Vulnerabilities and Countermeasures by Language] Java Secure Coding (Scheduled to be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 8. [Security Vulnerabilities and Countermeasures by Language] Java Secure Coding

<1st Edition> [Security Vulnerabilities and Countermeasures by Language] Python Secure Coding (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 9. [Security Vulnerabilities and Countermeasures by Language] Python Secure Coding

<1st Edition> [Web Application Security] Web Application Security Overview (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 10. [Web Application Security] Application Security Overview

<1st Edition> [Web Application Security] Cross-Site Scripting (XSS) (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 11. [Web Application Security] Cross-Site Scripting (XSS)

<1st Edition> [Web Application Security] Cross-Site Request Forgery (CSRF) (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 12. [Web Application Security] Cross-Site Request Forgery (CSRF)

<1st Edition> [Web Application Security] Security Headers and HTTPS (Scheduled to be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 13. [Web Application Security] Security Headers and HTTPS

<1st Edition> [Authentication and Authorization] Basics of Authentication and Authorization (Scheduled to be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 14. [Authentication and Authorization] Basics of Authentication and Authorization

<1st Edition> [Authentication and Authorization] Password Management (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 15. [Authentication and Authorization] Password Management

<1st Edition> [Authentication and Authorization] OAuth and JWT (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 16. [Authentication and Authorization] OAuth and JWT

<1st Edition> [Authentication and Authorization] Session Management (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 17. [Authentication and Authorization] Session Management

<1st Edition> [Practical Application and Analysis of Secure Coding] Code Review and Static Analysis Tools (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 18. [Practical Application and Analysis of Secure Coding] Code Review and Static Analysis Tools

<1st Edition> [Practical Application and Analysis of Secure Coding] Dynamic Analysis and Pentesting (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 19. [Practical Application and Analysis of Secure Coding] Dynamic Analysis and Pentesting

<2nd Edition> Section 20. [Web Application Security] SQL Injection and Injection Families

<2nd Edition> Section 21. [Access Control] Access Control Systems and Privilege Escalation Defense

<2nd Edition> Section 22. [Data Protection and Encryption] Symmetric/Asymmetric Encryption and Key Management

<2nd Edition> Section 23. [Supply Chain and Dependency Security] SCA·SBOM·Package Signing

<2nd Edition> Section 24. [API and Cloud Security] OWASP API Top 10·SSRF·Cloud Isolation

<2nd Edition> Section 25. [Observability·Auditing·Incident Response] A09 Logging·Monitoring·IR