Testing software for security

Contents

• Introduction Introduction

  • Overview

    4m 20s
• 1. Handling Vulnerabilities 1. Handling Vulnerabilities

  • Prior knowledge and expectations

    4m 50s
  • (Locked)
    Gather software requirements

    13m 17s
  • (Locked)
    Challenge: Identity requirements

    2m 6s
  • (Locked)
    Solution: Identify requirements

    8m 18s
  • (Locked)
    Factors that undermine software security

    10m 39s
  • (Locked)
    Software vulnerabilities and attack phases

    9m 38s
  • (Locked)
    Attack patterns

    19m 18s
  • (Locked)
    Challenge: Find vulnerabilities

    3m 8s
  • (Locked)
    Solution: Find vulnerabilities

    10m 18s
  • (Locked)
    Challenge: New password requirements

    3m 12s
  • (Locked)
    Solution: New password requirements

    9m 22s
  • (Locked)
    Challenge: Hashing passwords

    3m 42s
  • (Locked)
    Solution: Hashing passwords

    19m 1s
  • (Locked)
    Vulnerability intelligence

    13m 13s
  • (Locked)
    Challenge: Vulnerability search

    4m 2s
  • (Locked)
    Solution: Vulnerability search

    15m 31s
• 2. Designing for Security 2. Designing for Security

  • Bugs in software

    14m 11s
  • (Locked)
    External libraries and services

    16m 44s
  • (Locked)
    Handling errors securely

    17m 28s
  • (Locked)
    Human-related security

    15m 39s
  • (Locked)
    Security requirements and design

    10m 34s
  • (Locked)
    Security through the software lifecycle

    17m
  • (Locked)
    Challenge: Exploring leftover artifacts

    2m 7s
  • (Locked)
    Solution: Exploring leftover artifacts

    14m 1s
• 3. Developing Secure Code 3. Developing Secure Code

  • Principles of secure design

    13m 26s
  • (Locked)
    Avoid common mistakes

    16m 6s
  • (Locked)
    Challenge: Common security design flaws

    4m 25s
  • (Locked)
    Solution: Common security design flaws

    16m 19s
  • (Locked)
    Understand risk and threats

    13m 6s
  • (Locked)
    Risk response strategies

    12m 30s
  • (Locked)
    Exploit countermeasures

    13m 57s
• 4. Implementing Common Protections 4. Implementing Common Protections

  • Guidelines for secure coding

    14m 16s
  • (Locked)
    Buffer overflows and prevention

    13m 8s
  • (Locked)
    Race conditions

    10m 9s
  • (Locked)
    Challenge: Use locks to remediate race condition

    5m 54s
  • (Locked)
    Solution: Use locks to remediate race condition

    8m 52s
  • (Locked)
    OWASP top ten platform vulnerabilities

    10m 28s
  • (Locked)
    Web application vulnerabilities deep dive

    16m 50s
  • (Locked)
    Mobile application vulnerabilities deep dive

    16m 17s
  • (Locked)
    IoT vulnerabilities deep dive

    19m
  • (Locked)
    Desktop vulnerabilities deep dive

    13m 37s
  • (Locked)
    Privacy vulnerability defects

    20m 41s
• 5. Testing and Maintaining Software Security 5. Testing and Maintaining Software Security

  • (Locked)
    Secure session management

    12m 12s
  • (Locked)
    Users, protections, and passwords

    16m 42s
  • (Locked)
    Encryption and data protections

    17m 1s
  • (Locked)
    Error handling and protections

    13m 30s
• Conclusion Conclusion

  • (Locked)
    Testing software for security

    22m 34s
  • (Locked)
    Monitoring and logging of production applications

    14m 49s