bmind20011088

シキュアコーディング（Secure Coding: セキュアコーディング）が何か全く知らなくても理解できるようになる講義です。
基本的なセキュアコーディングの概念を習得後、ウェブサービスのセキュリティを中心に解説します。
OO大学主催の特別講義として行われたものです。
160以上のソースコードを豊富なコメント付きで提示し、実務で即座に使える核心テーマと技法をピンポイントで理解できるようになります。

arigaram

セキュアコーディング分割

보안교육

This lecture is designed for understanding even if you have no prior knowledge of what Secure Coding (Security Coding) is. After covering basic security coding concepts, it focuses on web service security. This was a special lecture presented under the auspices of OO University. It presents over 160 source codes with rich comments, pinpointing core topics and techniques immediately applicable in practice.

입문

초급

중급이상

security training

Secure Coding Breakdown

[Secure Coding Overview and Fundamentals] Course Information

[Secure Coding Overview and Fundamentals] The Importance of Secure Coding

[Secure Coding Overview and Fundamentals] Threat Modeling

[Secure Coding Overview and Fundamentals] Coding Standards and Guidelines

[Secure Coding Overview and Fundamentals] Basic Practice - Safe Input Processing

[Security Vulnerabilities and Response Methods by Programming Language] Overview of Security Vulnerabilities by Programming Language

[Security Vulnerabilities and Countermeasures by Language] Secure Coding in C and C++

[Security Vulnerabilities and Response Methods by Language] Java Security Coding

[Security Vulnerabilities and Response Methods by Language] Python Security Coding

[Web Application Security] Web Application Security Overview

[Web Application Security] Cross-Site Scripting (XSS)

[Web Application Security] Cross-Site Request Forgery (CSRF)

[Web Application Security] Security Headers and HTTPS

[Authentication and Authorization] Basics of Authentication and Authorization

[Authentication and Authorization] Password Management

[Authentication and Authorization] OAuth and JWT

[Authentication and Authorization] Session Management

[Practical Application and Analysis of Secure Coding] Code Review and Static Analysis Tools

[Practical Application and Analysis of Secure Coding] Dynamic Analysis and Penetration Testing