Software Security Fundamentals

Duration

3 Days

Target Audience

• Developers
• Product Managers
• Junior Architects
• Team Leaders

Method of Delivery

On-site or Remote

Course Description

Security is one of the most critical aspects of modern software systems. A single security flaw can lead to data breaches, financial loss, and reputational damage. Yet, security is often treated as an afterthought rather than an integral part of software development.

This comprehensive 3-day course provides a solid foundation in software security, covering the entire security lifecycle—from threat modeling and secure architecture to secure coding practices, security testing, and production security. Participants will also explore real-world security case studies to understand how security vulnerabilities arise and how to mitigate them effectively.

With over 20 years of experience as a software architect and instructor, and having trained over 300K students worldwide, I ensure that this course is practical, insightful, and tailored to real-world security challenges.

By the end of the course, attendees will have a deep understanding of software security best practices and the ability to design and build secure applications.

Syllabus

Day 1: The Software Security Process

• Introduction to Software Security
  • Why security matters
  • Common threats and attack vectors
  • Software security terminology
• Secure Architecture Process
• Threat Modeling
  • Introduction to Threat Modeling
  • Conduction Threat Modeling
  • Threat Modeling tools
• Secure Architecture
  • The 5 perimeters of security
  • Physical, network and platform security

Day 2: Secure Perimeters and Implementation

• Application and Data Security
  • Secure coding best practices
  • Preventing common vulnerabilities (SQL injection, XSS, CSRF, etc.)
  • Authorization and authentication
• SDLC
  • The SDLC process
  • Best practices for SDLC
• Security testing

Day 3: Production Security & Case Studies

• Production Security & Incident Response
  • Monitoring & logging for security threats
  • Handling security breaches & mitigation strategies
• Case Study & Best Practices
  • Analyzing real-world case study
  • Going through the security process
• Conclusion

Additional Notes

• This course is highly practical and hands-on.
• The content, structure, and duration can be customized to meet your team’s specific needs.

Want to discuss this course and see how it can elevate your team’s architecture skills? Let’s talk.