Secure Developer (Core)

Overview

The Secure Developer – Core Learning Path introduces application security’s fundamental and primary drivers. The curriculum provides individuals with an understanding of the importance of secure software development while preparing them to perform at the organizational level. Learners will gain in-depth knowledge of security principles, attacks, tools, and processes to develop secure software. By introducing the OWASP Top 10, learners are prepared to identify the most critical web application security risks, appropriately address those vulnerabilities, and prevent software flaws that enable cyberattacks.

Upon successful completion of this path, you will have the knowledge and skills to:

• Define the value of having secure applications
• Integrate secure software development practices into all phases of the software development lifecycle
• Explain the anatomy of an application attack
• Apply best practices to protect all components of the software
• Identify and mitigate the most common application security risks
• Implement a security strategy based on your organization’s risk
• Produce well-secured software

NOTE: This Learning Path is considered principal to all Elite Secure Developer Learning Paths. Learn and Skill labs are elective training modules that help transform concepts into tangible skills through hands-on, realistic examples of real-world threat scenarios.

Courses

• AWA 101 – Fundamentals of Application Security
• AWA 102 – Secure Software Concepts
• COD 102 – The Role of Software Security
• COD 103 – Creating Software Security Requirements
• COD 104 – Designing Secure Software
• COD 105 – Secure Software Development
• COD 106 – The Importance of Software Integration and Testing
• COD 107 – Secure Software Deployment
• COD 108 – Software Operations and Maintenance
• DES 232 – Mitigating OWASP 2021 Injection
• DES 233 – Mitigating OWASP 2021 Identification and Authentication Failures
• DES 234 – Mitigating OWASP 2021 Cryptographic Failures
• DES 235 – Mitigating OWASP 2021 Insecure Design
• DES 236 – Mitigating OWASP 2021 Broken Access Control
• DES 237 – Mitigating OWASP 2021 Security Misconfiguration
• DES 238 – Mitigating OWASP 2021 Server-Side Request Forgery (SSRF)
• DES 239 – Mitigating OWASP 2021 Software and Data Integrity Failures
• DES 240 – Mitigating OWASP 2021 Vulnerable and Outdated Components
• DES 241 – Mitigating OWASP 2021 Security Logging and Monitoring Failures
• LAB 101 – Identifying Broken Access Control Vulnerabilities
• LAB 103 – Identifying Broken User Authentication Vulnerabilities
• LAB 106 – Identifying Cross-Site Scripting Vulnerabilities
• LAB 107 – Identifying Injection Vulnerabilities
• LAB 109 – Identifying Security Misconfiguration Vulnerabilities
• LAB 110 – Identifying Sensitive Data Exposure Vulnerability Identification
• LAB 113 – Identifying Cryptographic Failures
• LAB 115 – Identifying Reflective XSS
• LAB 119 – Identifying Persistent XSS
• LAB 120 – Identifying XML Injection
• LAB 121 – Identifying Vulnerable and Outdate Components
• LAB 127 – Identifying Security Logging and Monitoring Failures
• LAB 129 – Identifying Error Message Containing Sensitive Information
• LAB 133 – Identifying Exposure of Sensitive Information Through Environmental Variables (NEW)