Module Overview
The module aims to develop core competencies in the fields of secure software concepts, secure software requirements, design, implementation, coding and testing. Nowadays, almost all the software dependent appliances, devices, business services and industries are susceptible and vulnerable to hostile cyber-attacks intended to exploit security weaknesses in operating systems, mobile apps, web apps, databases and web servers.
This module teaches a systematic method applied throughout the development lifecycle that places security at the centre of product development with focus on people, processes, and technology components of software, networks, and host defences to prevent, mitigate and recover from malicious interventions. Topics of discussion include security concepts in the SDLC, risk management, best practices (e.g., NIST and OWASP etc.), trusted computing, secure software design, known vulnerabilities and malware attacks, SQL Injection and legal and ethical issues.
Note: I prepared the module content and syllabus for this course but did not deliver the teaching.
Syllabus
- Week 1: Secure SDLC Foundations
- Week 2: Threat Modeling (STRIDE)
- Week 3: Secure Design Principles
- Week 4: Auth & Authorization Patterns
- Week 5: Input Validation & Sanitization
- Week 6: Secure Data Storage (Encryption)
- Week 7: Session & Error Management
- Week 8: OWASP Top 10 Deep Dive
- Week 9: Secure API & Microservices
- Week 10: Supply Chain Security
- Week 11: Static/Dynamic Analysis (SAST)
- Week 12: DevSecOps & CI/CD Security