How to Write Secure Code Training Course

Today, developers have access to various programming languages capable of compiling code for the .NET and ASP.NET frameworks. While this environment offers robust tools for security development, it is crucial for developers to understand how to apply architectural and coding-level techniques to implement effective security measures, avoid vulnerabilities, and limit potential exploitation.

This course aims to equip developers with the skills to prevent untrusted code from executing privileged actions through numerous hands-on exercises. Participants will learn to protect resources via strong authentication and authorization, manage remote procedure calls, handle sessions, and explore various implementation strategies for specific functionalities.

The course introduces various vulnerabilities by highlighting typical programming errors made when using .NET. The discussion on ASP.NET vulnerabilities covers the impact of different environment settings. Furthermore, the section on ASP.NET-specific vulnerabilities addresses general web application security challenges alongside specialized issues and attack vectors, such as ViewState attacks and string termination exploits.

Participants attending this course will

• Grasp fundamental concepts of security, IT security, and secure coding principles
• Identify web vulnerabilities beyond the OWASP Top Ten and learn how to mitigate them
• Utilise the various security features available in the .NET development environment
• Acquire practical skills in using security testing tools
• Recognise common coding mistakes and understand how to prevent them
• Gain insights into recent vulnerabilities affecting .NET and ASP.NET
• Access sources and further reading materials on secure coding practices

Audience

Developers

In this instructor-led, live course in South Africa, participants will learn how to formulate the proper security strategy to face the DevOps security challenge.

This world-class, cutting-edge, hands-on workshop immerses participants in the critical realities of modern CI/CD pipeline security. Designed for security professionals, DevOps engineers, and developers eager to master advanced pipeline breach defence, the training blends live attack simulations with industry-leading tools and practical defence techniques.

Guided by the latest OWASP GenAI Security Project recommendations, participants will learn to identify, evaluate, and mitigate AI-specific threats through practical exercises and real-world scenarios.

This instructor-led live training in South Africa (online or on-site) is designed for web developers and leaders who wish to explore and implement the OWASP Top 10 reference standard to secure their web applications.

By the end of this training, participants will be able to strategize, implement, secure, and monitor their web applications and services using the OWASP Top 10 document.

This instructor-led, live training in South Africa (online or onsite) is designed for developers, engineers, and architects who wish to apply the WSTG testing framework, principles, and techniques to secure their web applications and services.

Upon completion of this training, participants will be able to:

• Utilise the WSTG to integrate testing processes and techniques into the web development lifecycle.
• Investigate various testing methods to tailor the WSTG framework to specific business requirements.
• Execute diverse security testing procedures to shield web applications from risks and cyberattacks.
• Produce an assessment report to document security testing findings and outcomes.