Course Catalog / Learning Path / C Developer

C Developer

Overview

The C Developer learning path includes a variety of security courses that will vary depending on whether you are seeking core, advanced or elite paths. It is designed to provide a solid understanding of security features required to develop secure code that integrates into operating systems, operating system modules, embedded systems, or low-level libraries for other high-level languages.

The C Developer learning path covers key application security concepts including:

Memory management and string handling
Avoiding common pitfalls
C specific security flaws

Core

AWA 101 Fundamentals of Application Security
AWA 102 Secure Software Concepts
COD 102-108 Fundamentals of SDLC Security Series (7)
COD 261 Threats to Scripts

Advanced

COD 201-202 Creating Secure C Code Series (2)
COD 301-303 Protecting C Code Series (3)
DES 202-205 Fundamentals of Cryptography Series (4)
TST 255 Testing for Missing Authentication for Critical Function
TST 257 Testing for use of Hard-Coded Credentials
TST 259 Testing for Unrestricted Upload of File with Dangerous Type
TST 260 Testing for Reliance of Untrusted Inputs in a Security Decision
TST 261 Testing for Execution with Unnecessary Privileges
TST 264 Testing for Download of Code without Integrity Check
TST 266 Testing for Inclusion of Functionality from Untrusted Control Sphere
TST 267 Testing for Incorrect Permission Assignment for Critical Resource
TST 268 Testing for Use of a Potentially Dangerous Function
TST 271 Testing for Improper Restriction of Excessive Authentication Attempts
TST 272 Testing for Open Redirect
TST 273 Testing for Uncontrolled Format String

Elite

DES 101 Fundamentals of Secure Architecture
DES 212 Architecture Risk Analysis and Remediation
DES 311 Creating Secure Application Architecture
ENG 191-195 Integrating the MS SDL into your SDLC Series (5)
ENG 211 How to Create Application Security Design Requirements
ENG 311 Attack Surface Analysis & Reduction
ENG 312 How to Perform a Security Code Review

Ready to Demo? Questions about learning paths? Contact Us!

Learning Path Details

Number of Courses: 40

Total Duration: 19 hours

Total CPE Credits: 23.5

The Courses

View All Courses Download Learning Path Catalog Download Course Catalog

Course Catalog / Learning Path / C Developer

C Developer

Overview

Learning Path Details

The Courses

COD 108 – Software Operations and Maintenance (NEW)

COD 107 – Secure Software Deployment (NEW)

COD 106 – The Importance of Software Integration and Testing (NEW)

COD 105 – Secure Software Development (NEW)

COD 104 – Designing Secure Software (NEW)

COD 103 – Creating Software Security Requirements (NEW)

COD 102 – The Role of Software Security (NEW)

TST 272 – Testing for Open Redirect (CWE-601)

TST 271 – Testing for Improper Restriction of Excessive Authentication Attempts (CWE-307)

TST 268 – Testing for Use of a Potentially Dangerous Function (CWE-676)

TST 267 – Testing or Incorrect Permission Assignment for Critical Resource (CWE-732)

TST 266 – Testing for Inclusion of Functionality from Untrusted Control Sphere (CWE-829)

TST 264 – Testing for Download of Code without Integrity Check (CWE-494)

TST 261 – Testing for Execution with Unnecessary Privileges (CWE-250)

TST 260 – Testing for Reliance on Untrusted Inputs in a Security Decision (CWE-807)

TST 259 – Testing for Unrestricted Upload of File with Dangerous Type (CWE-434)

TST 257 – Testing for Use of Hard-Coded Credentials (CWE-798)

TST 255 – Testing for Missing Authentication for Critical Function (CWE-306)

ENG 312 – How to Perform a Security Code Review

ENG 311 – Attack Surface Analysis & Reduction

ENG 211 – How to Create Application Security Design Requirements

ENG 205 – Fundamentals of Threat Modeling

ENG 195 – Implementing the Microsoft SDL Threat Modeling Tool

ENG 194 – Implementing Microsoft SDL Line of Business

ENG 193 – Implementing the Microsoft SDL Optimization Model

ENG 192- Implementing the Agile Microsoft SDL

DES 311 – Creating Secure Application Architecture

DES 212 – Architecture Risk Analysis & Remediation

DES 205 – Message Integrity Cryptographic Functions

DES 204 – Role of Cryptography in Application Development

DES 203 – Cryptographic Components: Randomness, Algorithms, and Key Management

DES 202 – Cryptographic Suite Services: Encoding, Encrypting & Hashing

DES 101 – Fundamentals of Secure Architecture

COD 303 – Common C Vulnerabilities & Attacks

COD 302 -Secure C Memory Management

COD 301 – Secure C Buffer Overflow Mitigations

COD 202 – Secure C Runtime Protection

COD 201 – Secure C Encrypted Network Communications

AWA 102 – Secure Software Concepts

AWA 101 – Fundamentals of Application Security (UPDATED)