How to Write Secure Code Training Course

Today, numerous programming languages can compile code for the .NET and ASP.NET frameworks. While this environment offers robust tools for security development, developers must understand how to apply programming techniques at both the architecture and coding levels. This knowledge is essential for implementing desired security features, avoiding vulnerabilities, and limiting potential exploitation.

This course aims to equip developers with the skills to prevent untrusted code from executing privileged actions, protect resources via strong authentication and authorization, manage remote procedure calls and sessions, and implement various functional alternatives. Through extensive hands-on exercises, participants will gain practical insights into these critical areas.

The discussion on vulnerabilities begins by examining common programming errors encountered when using .NET. The analysis of ASP.NET vulnerabilities further explores various environment settings and their impacts. Additionally, the course addresses ASP.NET-specific security challenges, including general web application security issues and specialized attack vectors such as ViewState manipulation and string termination attacks.

Participants attending this course will

• Grasp the fundamental concepts of security, IT security, and secure coding practices
• Identify web vulnerabilities beyond the OWASP Top Ten and learn strategies to avoid them
• Utilize the various security features available in the .NET development environment
• Acquire practical experience with security testing tools
• Recognize typical coding mistakes and understand how to prevent them
• Stay informed about recent vulnerabilities affecting .NET and ASP.NET
• Access resources and further reading materials on secure coding practices

Audience

Developers

In this instructor-led, live course in Portugal, participants will learn how to formulate an effective security strategy to address the challenges of DevOps security.

This premier, state-of-the-art, practical workshop places participants directly into the critical realities of securing modern CI/CD pipelines. Tailored for security specialists, DevOps engineers, and developers keen to master advanced breach defense, the training combines live attack simulations with industry-leading tools and practical defensive strategies.

Guided by the latest OWASP GenAI Security Project standards, participants will learn to identify, assess, and mitigate AI-specific threats through practical exercises and real-world scenarios.

This instructor-led live training in Portugal (online or onsite) is targeted at web developers and leaders who wish to explore and implement the OWASP Top 10 reference standard to safeguard their web applications.

By the conclusion of this training, participants will be capable of strategizing, implementing, securing, and monitoring their web applications and services in accordance with the OWASP Top 10 document.

This instructor-led live training in Portugal (online or onsite) is designed for developers, engineers, and architects who wish to apply the WSTG testing framework, principles, and techniques to secure their web applications and services.

By the end of this training, participants will be able to:

• Utilise the WSTG to implement testing processes and techniques within the web development lifecycle.
• Explore various testing techniques to customise the WSTG framework according to business requirements.
• Carry out different security testing methods to safeguard web applications against risks and attacks.
• Create an assessment report to document security testing findings and results.