Buenas prácticas para el Desarrollo Seguro de Software

Explore the crucial phases of the Software Development Life Cycle (SDLC) and identify the 10 most significant risks impacting modern applications. This comprehensive course goes beyond web application security, delving into risks associated with software infrastructure design, development, and implementation, including Web APIs and services. Learn about the most effective remediation and mitigation techniques to build secure software.

We'll cover fundamental concepts like integrity, confidentiality, and availability, alongside authentication and authorization principles. Understand secure design principles, attack vectors, types of attacks, and how to minimize your attack surface.

Course Objectives:

• Understand secure SDLC: Grasp the stages and processes that influence software security.
• Risk Assessment: Learn to identify and measure risks in applications – a critical first step to effective control.
• Vulnerability Management: Detect, mitigate, and resolve vulnerabilities proactively.
• Threat Response: Learn how to prevent and respond swiftly to detected threats.
• Secure Development Practices: Develop habits for secure software development.
• Security Culture: Normalize security processes within your software development culture.

The ultimate goal is to equip you with the tools and habits needed to produce software meeting specific security standards.

Course Outline:

• Security Principles: Begin with foundational definitions of cybersecurity and information security. Explore key concepts like integrity and confidentiality, and understand their importance in subsequent chapters.
• Secure SDLC: Illustrate the vital phases of the SDLC where cybersecurity considerations are paramount. This includes everything from requirements gathering to pre-production penetration testing (pentest) and hardening.
• Design, Analysis, and Secure Coding: Deep dive into processes, techniques, tools, and documentation to enhance security posture. Focus on securing architectures, frameworks, and code to prevent threats and meet requirements efficiently.
• OWASP Top 10: Review the most critical vulnerabilities in modern software, particularly for Web applications, but also applicable to APIs, Mobile apps, and Cloud environments. Learn how these vulnerabilities arise, how to identify them, and how they can be exploited in various scenarios.