In an effort to improve security in the programs I develop I took several classes in the Foundations of Software Security from Cigital. These classes were split up into three certifications (Foundational, Subject Matter Expert, and Security Champion). There were interactive online videos to watch and participate in followed by a quiz for each topic.
The foundational courses were the first set of courses required. The gave the basic information about various cyber attacks and prevention. The certifcation had 11 courses to complete.
The subject matter expert courses dove deeper into attacks and prevention related to specific programming languages.
The security champion cources wrapped up the certifcations with a focus on architecture and testing strategies.
Foundations | Requirements, Threats, and Architecture | Coding Errors and Defensive Programming | Security Testing | Mobile |
---|---|---|---|---|
Foundations of Information Security Awareness | Foundations of Software Security Requirements | Attack & Defense | Foundations of Mobile Security | |
Foundations of Software Security | OWASP Top 10 Plus 2 | Foundations of Android Security | ||
Introduction to PCI for Developers | Foundations of PHP Security | Foundations of iOS Security | ||
Foundations of JavaScript and HTML5 Security |
Foundations | Requirements, Threats, and Architecture | Coding Errors and Defensive Programming | Security Testing | Mobile |
---|---|---|---|---|
Introduction to Cryptography for Architects and Developers | Foundations of Threat Modeling | Defensive Programming for PHP | Defensive Programming for Android | |
Defensive Programming for JavaScript and HTML5 | Defensive Programming for iOS | |||
Defensive Programming for JavaEE | ||||
Defensive Programming for C# | ||||
Defensive Programming for C/C++ |
Foundations | Requirements, Threats, and Architecture | Coding Errors and Defensive Programming | Security Testing | Mobile |
---|---|---|---|---|
Architecture Risk Analysis | Risk-Based Security Testing Strategy |