How to Write Secure Code Training Course

A variety of programming languages are currently available to compile code for the .NET and ASP.NET frameworks. While this environment offers robust tools for security development, developers must understand how to apply architecture- and code-level programming techniques to implement the desired security functionality, thereby avoiding vulnerabilities or limiting their exploitation.

The goal of this course is to equip developers with the skills to prevent untrusted code from executing privileged actions, protect resources through robust authentication and authorisation, facilitate remote procedure calls, manage sessions, and introduce alternative implementations for specific functionality, among other critical areas, through extensive hands-on exercises.

The introduction to various vulnerabilities begins by examining typical programming errors common in .NET usage. The discussion on ASP.NET vulnerabilities also addresses various environment settings and their impacts. Furthermore, the topic of ASP.NET-specific vulnerabilities covers general web application security challenges, as well as special issues and attack methods such as attacking the ViewState or string termination attacks.

Participants attending this course will

• Grasp the fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and understand how to prevent them
• Learn to utilise the various security features of the .NET development environment
• Gain practical knowledge in using security testing tools
• Understand typical coding mistakes and how to avoid them
• Receive information on recent vulnerabilities within .NET and ASP.NET
• Access sources and further reading on secure coding practices

Audience

Developers

In this instructor-led, live course in Australia, participants will learn how to formulate the proper security strategy to face the DevOps security challenge.

This world-class, cutting-edge, hands-on workshop immerses participants in the critical realities of modern CI/CD pipeline security. Designed for security professionals, DevOps engineers, and developers eager to master advanced pipeline breach defense, the training blends live attack simulations with industry-leading tools and practical defense techniques.

Based on the latest OWASP GenAI Security Project guidance, participants will learn to identify, assess, and mitigate AI-specific threats through hands-on exercises and real-world scenarios.

This instructor-led, live training in Australia (online or onsite) is aimed at web developers and leaders who wish to explore and implement the OWASP Top 10 reference standard to secure their web applications.

By the end of this training, participants will be able to strategise, implement, secure, and monitor their web applications and services using the OWASP Top 10 document.

This instructor-led, live training in Australia (online or in person) is designed for developers, engineers, and architects who wish to apply the WSTG testing framework, principles, and techniques to secure their web applications and services.

Upon completion of this training, participants will be able to:

• Utilise the WSTG to integrate testing processes and techniques into the web development lifecycle.
• Explore different testing techniques to customise the WSTG framework according to business needs.
• Conduct various security testing methods to defend web applications against risks and attacks.
• Generate an assessment report to record security testing findings and results.