Become a .Net Razor Developer

OWASP Proactive Controls

Applications are built on the back of software developers, with user interface, business logic, controllers, and other components engineered carefully. To create secure software, developers must be encouraged and assisted by the organization they write code for. The development process must also be carried with security in mind, which is only attainable if organizations and developers work on a continuum. 

This may be challenging, and developers often fail due to inadequate knowledge about encryption and security. Add to that is the organizational barrier that restricts developers from getting the necessary resources and guidance. And even with sufficient guidance and provision of institutions, there are persisting security vulnerabilities in design and coding that cap developers from rendering seamless applications. Putting this in mind, a standardized coding guide comes all the more necessary. One that bears lasting significance in the pursuit of application  programming is the Open Web Application Security Project Top 10 Proactive Control 2018.

About the Course

This two-part lecture serves as a resolution for the coding challenges that both developers and organizations face. The OWASP Top 10 Proactive Controls 2018 compiles multiple security techniques that every software development project must implement. More so, this tutorial puts emphasis on different best practices, which bear relevance towards the realization of highly secure and encrypted web, desktop, and mobile applications.

Who is this Course for?

As mentioned above, this tutorial aims to provide a comprehensive discussion of coding techniques and security best practices for software development projects. Those institutions and/ or developers currently undertaking related ventures may sign up for this course. 

Course Prerequisites and Skills to be developed

This tutorial does not require much, only that it asks course takers to have novice to intermediate web development skills. It would also be advantageous to have knowledge about the fundamentals of application security. Throughout the course, course takers are also expected to acquire additional skills including security verification, proper SQL injection, and formulation of passwords.

Controls 1- 5

This lesson covers security controls such as checking for security early and frequently, learning about parameterizing SQL queries, encoding data input that may be interpreted as executable code, verifying data input, and ultimately learning about identification and authentication approaches.

Controls 6-10 

The subsequent part of the lecture presents the remaining five controls. This tutorial seeks to see course takers through a series of discussions including access control implementation, verification, data protection, intrusion detection, and other best practices for exception handling.