From the course: CCSP Cert Prep: 4 Cloud Application Security
Unlock the full course today
Join today to access over 24,900 courses taught by industry experts.
Secure coding guidance
From the course: CCSP Cert Prep: 4 Cloud Application Security
Secure coding guidance
- [Instructor] Now that you understand many of the vulnerabilities that might impact applications, we can move on to many of the security practices that you can follow to promote secure coding. We'll get to some specifics in the videos that follow this one. But before we do that, I'd like to share some industry guidance that can help you as you develop your code. You don't need to reinvent the wheel. Just as there are many industry resources designed to help you understand common application vulnerabilities, there are also industry resources that help you create better code. Remember OWASP, the Open Web Application Security Project? They published the top 10 vulnerabilities list that we discussed earlier. OWASP also publishes the Application Security Verification Standard, ASVS. This is an auditing standard that contains detailed tests that can be performed to demonstrate that an application is secure. The standard…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Contents
-
-
-
-
-
(Locked)
Secure coding guidance1m 59s
-
(Locked)
Input validation2m 37s
-
(Locked)
Parameterized queries3m
-
(Locked)
Authentication and session management issues1m 49s
-
(Locked)
Output encoding3m 13s
-
(Locked)
Error and exception handling3m
-
(Locked)
Code signing2m 8s
-
(Locked)
Database security3m 53s
-
(Locked)
-
-
-
-
-