Designing for Security

Make the most for your product security with a practical approach on the code design

This hands-on, practical workshop will teach you how to handle security while developing a software system. The purpose is to help you become aware of security risks and start improving the security of your software system, with a practical approach on the code design.

Why Attend

Attend this workshop to:

Understand the security mindset
Learn and practice principles of secure software
Model and practice the security of your software

Who Should Attend

Any software professional involved in a software project or product.

Practical Details

Language: English
Experiential, hands-on, interactive online learning with practical examples
Participants will be awarded a Mozaic Works certificate of completion

This Learning Program is Available on Demand

Agenda

Intro. Security mindset.
Common vulnerabilities & how to avoid them
Principle: Defense in Depth
Exercise: Design against vulnerabilities
Validation. How to do it right. Caveats
Exercise: Design validation
Practical cryptography
How to store passwords & secrets
Exercise cryptography
Data flows. Data flow diagram
Exercise: create data flow diagram. Acknowledge risks
Testing for security. Tools
Exercise: testing for security
THREAT modelling
Exercise: Model your threats
(Optional) Basic penetration testing and security test automation. Review the code for security issues
Final Debriefing. What’s next?

More details and full agenda here

Prerequisites

At least 2 years of experience in software development

What’s next?

Schedule a few Hands-on Training on the Job sessions with the trainer so that you will apply the concepts in production
Attend the Designing for Performance workshop

Meet Your Trainers

Adrian Bolboaca

VP of Innovation, Senior Trainer at Mozaic Works

With more than 16 years of international experience in the world of software and transformations, Adrian shares about himself: I want to help my clients improve their business. I was helped by my professors, colleagues and mentors to continuously improve. Whenever I write code I focus on reducing domain complexity to obtain robust, maintainable software. The continuous improvement paradigm is important for the people I work with and for myself; this is why I like helping people, teams and businesses to become more adaptable and reach their goals. About Adi International hands-on experience in product & software development for more than 16 years in small and large companies, with customers from Germany, Switzerland, Finland, Sweden, Netherlands, Romania, Italy, France Experienced…

More about Adrian Bolboaca >