Application Security for Developers Training Course

Developers currently have access to multiple programming languages that compile code for the .NET and ASP.NET frameworks. Although these environments provide powerful tools for security development, engineers must be proficient in applying architecture-specific and code-level techniques. This expertise is critical for implementing required security functionality, preventing vulnerabilities, and minimizing the risk of exploitation.

The primary goal of this course is to guide developers through numerous practical exercises. These sessions cover preventing untrusted code from executing privileged actions, securing resources through robust authentication and authorization, managing remote procedure calls, handling sessions, and implementing diverse solutions for specific functional requirements.

The course introduces various vulnerabilities by first highlighting common programming errors associated with .NET usage. The discussion on ASP.NET vulnerabilities also examines the impact of various environment settings. Furthermore, the material addresses ASP.NET-specific security issues, including general web application challenges and specialized attack methods such as ViewState manipulation and string termination attacks.

What Participants Will Achieve

• Understand the core principles of security, IT security, and secure coding.
• Learn to identify and avoid web vulnerabilities that go beyond the standard OWASP Top Ten.
• Develop the ability to leverage the security features inherent in the .NET development environment.
• Acquire practical skills in utilizing security testing tools.
• Identify typical coding mistakes and learn how to prevent them.
• Gain insights into recent vulnerabilities reported in .NET and ASP.NET.
• Discover recommended sources and further reading materials on secure coding practices.

Intended Audience

Software Developers

In this instructor-led, live session held in Thailand, participants will gain insights into crafting robust security strategies to meet the demands of DevOps security challenges.

This Thailand course aims to support professionals in the following ways:

1. Helping developers master secure coding techniques.
2. Assisting software testers in evaluating application security prior to production release.
3. Enabling software architects to understand application-related risks.
4. Supporting team leaders in defining security standards for developers.
5. Guiding web administrators in server configuration to avoid misconfigurations.