Introduction
Introduction
()
1. Security and Risk Overview
The goals of secure coding
()
Understand the attacker
()
Threat modeling
()
Understand your risks
()
Break what you build
()
Document what you understand
()
Introduction to vulnerabilities
()
2. Web-Based Client Server Issues
Input validation
()
Communication channel
()
Session management
()
3. Thick Application and Client Server Issues
Error handling
()
Logging and output
()
Internal data management
()
Configuration
()
Database
()
File and I/O
()
Memory management
()
Dependencies
()
4. Embedded Device and IoT Issues
Physical security
()
Side channel
()
Memory
()
Software versioning
()
Third-party components
()
5. Security and Cryptography Misuse Issues
Authentication and password
()
Authorization and access control
()
Cryptography
()
6. Security in the SDLC
Requirements
()
Design
()
Development
()
Testing
()
Deployment
()
Operations
()
Containerization concerns
()
Best practices
()
7. Conclusion
Next steps
()