jungseungho5703

セキュアコーディング（Secure Coding）が何なのか全く知らなくても理解できる講義です。基本的なセキュアコーディングの概念を習得した上で、ウェブサービスセキュリティを中心に解説します。OO大学主催の特別講義として行われた内容です。160を超えるソースコードを豊富なコメントと共に提供し、実務ですぐに活用できる核心的なテーマや手法をピンポイントで学べるように構成されています。

arigaram

セキュアコーディング(Secure Coding)を紐解く

보안교육

실습 중심

This lecture is designed to be easily understood even if you have no prior knowledge of Secure Coding. After covering fundamental secure coding concepts, it focuses on web service security. This course was originally conducted as a special lecture hosted by OO University. It provides over 160 source codes with extensive comments, pinpointing core topics and techniques that can be applied immediately in the field.

입문

초급

중급이상

Penetration Testing

security

security training

Breaking Down Secure Coding

<1st Edition> Course Guide (To be deleted upon completion of the 2nd Edition course below)

<2nd Edition> Section 1. Course Information

<1st Edition> [Secure Coding Overview and Basics] Importance of Secure Coding (Scheduled to be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 2. [Secure Coding Overview and Basics] Importance of Secure Coding

<1st Edition> [Secure Coding Overview and Basics] Threat Modeling (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 3. [Secure Coding Overview and Basics] Threat Modeling

<1st Edition> [Secure Coding Overview and Basics] Coding Standards and Guidelines (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 4. [Secure Coding Overview and Basics] Coding Standards and Guidelines

<1st Edition> [Secure Coding Overview and Basics] Basic Practice - Safe Input Handling (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 5. [Secure Coding Overview and Basics] Basic Practice - Secure Input Handling

<1st Edition> [Security Vulnerabilities and Countermeasures by Language] Overview of Security Vulnerabilities by Language (Scheduled to be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 6. [Security Vulnerabilities and Countermeasures by Language] Overview of Security Vulnerabilities by Language

<1st Edition> [Security Vulnerabilities and Countermeasures by Language] C/C++ Secure Coding (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 7. [Security Vulnerabilities and Countermeasures by Language] Secure Coding in C and C++

<1st Edition> [Security Vulnerabilities and Countermeasures by Language] Java Secure Coding (Scheduled to be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 8. [Security Vulnerabilities and Countermeasures by Language] Java Secure Coding

<1st Edition> [Security Vulnerabilities and Countermeasures by Language] Python Secure Coding (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 9. [Security Vulnerabilities and Countermeasures by Language] Python Secure Coding

<1st Edition> [Web Application Security] Web Application Security Overview (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 10. [Web Application Security] Application Security Overview

<1st Edition> [Web Application Security] Cross-Site Scripting (XSS) (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 11. [Web Application Security] Cross-Site Scripting (XSS)

<1st Edition> [Web Application Security] Cross-Site Request Forgery (CSRF) (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 12. [Web Application Security] Cross-Site Request Forgery (CSRF)

<1st Edition> [Web Application Security] Security Headers and HTTPS (Scheduled to be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 13. [Web Application Security] Security Headers and HTTPS

<1st Edition> [Authentication and Authorization] Basics of Authentication and Authorization (Scheduled to be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 14. [Authentication and Authorization] Basics of Authentication and Authorization

<1st Edition> [Authentication and Authorization] Password Management (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 15. [Authentication and Authorization] Password Management

<1st Edition> [Authentication and Authorization] OAuth and JWT (To be deleted upon completion of the 2nd edition lecture below)

<2nd Edition> Section 16. [Authentication and Authorization] OAuth and JWT

<1st Edition> [Authentication and Authorization] Session Management (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 17. [Authentication and Authorization] Session Management

<1st Edition> [Practical Application and Analysis of Secure Coding] Code Review and Static Analysis Tools (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 18. [Practical Application and Analysis of Secure Coding] Code Review and Static Analysis Tools

<1st Edition> [Practical Application and Analysis of Secure Coding] Dynamic Analysis and Pentesting (To be deleted upon completion of the 2nd Edition lecture below)

<2nd Edition> Section 19. [Practical Application and Analysis of Secure Coding] Dynamic Analysis and Pentesting

<2nd Edition> Section 20. [Web Application Security] SQL Injection and Injection Families

<2nd Edition> Section 21. [Access Control] Access Control Systems and Privilege Escalation Defense

<2nd Edition> Section 22. [Data Protection and Encryption] Symmetric/Asymmetric Encryption and Key Management

<2nd Edition> Section 23. [Supply Chain and Dependency Security] SCA·SBOM·Package Signing

<2nd Edition> Section 24. [API and Cloud Security] OWASP API Top 10·SSRF·Cloud Isolation

<2nd Edition> Section 25. [Observability·Auditing·Incident Response] A09 Logging·Monitoring·IR