Security / Governance, Risk & Compliance

Secure development and testing of web applications

Advanced hands-on training that integrates the web application development process with secure software development methodologies. The program guides participants through the full application lifecycle, from architecture design to production deployment, with a focus on security aspects at each stage. The hands-on workshops allow participants to gain experience in implementing security features and verifying them through testing. The classes use real project scenarios, allowing practical application of the concepts learned in a controlled laboratory environment.

Issues

Secure Software Development Lifecycle
Threat Modeling
Authentication mechanisms
Authorization and access control
Secure data management
Cryptography in applications
Security testing
DevSecOps practices
Continuous Security
Incident Response
Risk Assessment
Security Monitoring

Benefits

The participant will gain the ability to design applications with built-in security mechanisms from scratch
Will learn to implement advanced security mechanisms in web applications
Will learn methods for systematic testing of application security at various stages of development
Will be able to integrate security practices into the software development process
Will develop the ability to detect and eliminate security vulnerabilities in application code
Will gain knowledge of security test automation in the CI/CD process
Will learn to create and implement security policies within the development team

Who is this training for?

Web application developers focusing on security

Application security engineers

DevSecOps Engineers integrating security practices

Solution architects responsible for security

Testers specializing in security

Development team leaders

Quality assurance specialists

Prerequisites

Practical experience in programming web applications
Knowledge of the basics of application security
Experience in CI/CD processes
Understanding network protocols

Training program

Security architecture and design patterns
Design of access control mechanisms
Secure management of user data

Secure programming techniques
Implementation of authentication and authorization
Secure session management and tokens
Protection against the most popular attacks

Security testing strategies

Penetration testing and code auditing
Verification of security mechanisms

Integration of security testing into the pipeline
Vulnerability scanning in the manufacturing process
Application security monitoring
Responding to security incidents

Delivery Methods

Online

Convenience of participating from anywhere
Interactive live sessions with trainer
Materials available for 30 days
No travel costs

On-site

Direct contact with trainer and group
Intensive hands-on workshops
Networking with other participants
Full focus on learning

Frequently asked questions

What are the prerequisites for this training?

For Secure development and testing of web applications we recommend: Practical experience in programming web applications; Knowledge of the basics of application security; Experience in CI/CD processes.

What is the format and duration of this training?

The training lasts 3 days and is available in online and on-site format. Sessions run from 9:00 AM to 4:00 PM. We can also customize the schedule to fit your team's needs.

Who is this training designed for?

This training is designed for: Web application developers focusing on security; Application security engineers; DevSecOps Engineers integrating security practices.