The purpose of this 30-hour course (including either the .Net or Java course) is to provide candidates with a comprehensive understanding of what a Secure Development Process is. The candidates will learn secure programming concepts and techniques; learn how to identify key characteristics of secure code; learn how to use design patterns for secure code; learn how to build in a secure requirement process in the software life cycle from the beginning to the end; and learn how to write, test, and debug programs using secure programming techniques. Topics will include design principles, code snippets, and a simple explanation of each step as you work your way through the course.
The primary objectives of the course are to:
- Identify what secure programming is and why it is needed
- Work with principles associated with software engineering
- Understand principles of security and quality in the industry and how to use them
- Understand the Application Guide
- Learn how to understand, analyze, and interpret software requirements
- Design for quality using industry frameworks
- Know what industry design patterns are and how to carry them out
- Understand industry standard development tools
- Know how to produce secure code
- Sustain a formal development process
