Description
About this course
Secure software starts with secure development practices.
This course gives developers and technical stakeholders a practical introduction to the vulnerabilities attackers commonly exploit in web applications, including injection attacks, cross-site scripting and cross-site request forgery.
Learners are introduced to the OWASP Top 10 and shown how common application security risks connect directly to everyday development decisions.
Rather than focusing only on theory, the course helps teams understand how vulnerabilities arise, how attackers exploit them, and how secure coding habits can reduce risk throughout the software development lifecycle.
The training is particularly useful for organisations strengthening secure development practices as part of PCI DSS, ISO 27001, application security or wider product security programmes.
Who is this course for?
This course is designed for technical teams involved in building, testing or managing software, including:
- Software developers and engineers
- Web and application developers
- QA and software testing teams
- DevOps and engineering teams
- Technical product owners
- Technical leads and engineering managers
- Application security teams
- Technical stakeholders involved in secure software delivery
What learners will learn
By completing the course, learners will be able to:
- Explain how common web application vulnerabilities are exploited
- Recognise the risks represented within the OWASP Top 10
- Understand how insecure coding decisions can introduce application vulnerabilities
- Identify common injection risks and defensive coding approaches
- Understand how cross-site scripting attacks work and how they can be prevented
- Recognise cross-site request forgery risks and appropriate controls
- Apply stronger secure coding habits in day-to-day development
- Support secure development lifecycle practices within their organisation
Topics covered
- OWASP Top 10
- Application security fundamentals
- Code injection
- Cross-site scripting (XSS)
- Cross-site request forgery (CSRF)
- Common software vulnerabilities
- Defensive coding practices
- Secure software development
- Secure SDLC principles
- Application security responsibilities
Course at a glance
Duration: Approximately 30 minutes
Format: Self-paced online learning
Level: Technical awareness / secure coding fundamentals
Audience: Developers, engineers, QA teams and technical stakeholders
Certificate: Certificate of completion included
Tracking: Completion tracking available for training and audit records
Learners: 450+ learners
Reviews
There are no reviews yet.