Module 1: Security overview

• What is application security?
• Importance of Security
• CIA (Confidentiality – Integrity – Availability) overview
• What is Phishing
• What is Vishing
• Data security overview
• Digital signature overview
• API overview

Module 2: Secure Coding

• What is secure coding?
• Importance of secure coding
• Secure coding guidelines & practices

Module 3: OWASP Top 10 vulnerabilities

• What is OWASP
• OWASP Top 10 vulnerabilities
  • Injections
  • Broken Authentication
  • Sensitive Data exposure
  • XML External Entities (XXE)
  • Broken Access control.
  • Security misconfigurations.
  • Cross Site Scripting (XSS)
  • Insecure Deserialization.
  • Using Components with known vulnerabilities
  • Insufficient logging and monitoring

Module 4: Secure Programming techniques

• Hashing
• Salting
• Dictionary attacks
• Other Password security techniques

Module 5: Security key Aspects: Authentication

• What is Authentication
• Authentication factors
• Authentication options overview
  • SAML
  • OpenID
  • OAUTH

Module 6: Type of code scanning

• Static scanning
• Dynamic scanning

Module 7: Code signing

• What is code signing?
• Benefits
• How does code signing work?
• Use of code signing

Module 8: Code signing

• What is code signing?
• Benefits
• How does code signing work?
• Use of code signing

Module 9: Security key Aspects: Authorization

• What is Authorization
• Authentication options overview
  • OpenAM
  • OAUTH

• Options comparison & when to choose what

Module 10: Logging and Monitoring

• Use Stackdriver to monitor and manage availability and performance
• Locate and inspect Kubernetes logs
• Create probes for wellness checks on live applications

Module 11: Security architecture: Threat modeling

• Introduction
• Terminology
• Importance of threat modeling
• Threat modelling AS process
• Mitigation
• Case study

Module 12: API security

• API overview
• Understanding the Potential Risks of APIs
• Ways to secure API
• Best practices