Course Code

cl-cna
 

     Duration

28 Hours
 
 

     Requirements

 

     Overview

Serving teams that use managed code (.NET and ASP.NET typically written in C#) together with native code development (typically C/C++), this training gives a comprehensive overview of the security issues in both environments.

Concerning C/C++, common security vulnerabilities are discussed, backed by practical exercises about the attacking methods that exploit these vulnerabilities, with the focus on the mitigation techniques that can be applied to prevent the occurrences of these dangerous bugs, detect them before market launch or prevent their exploitation.

The course also covers both the various general (like web services) and specific security solutions and tools, and the most frequent and severe security flaws of managed code, dealing with both language-specific issues and the problems stemming from the runtime environment. The vulnerabilities relevant to the ASP.NET platform are detailed along with the general web-related vulnerabilities following the OWASP Top Ten list. The course consists of a number of exercises through which attendees can easily understand and execute attacks and protection methods.

Participants attending this course will

  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn client-side vulnerabilities and secure coding practices
  • Learn to use various security features of the .NET development environment
  • Have a practical understanding of cryptography
  • Get information about some recent vulnerabilities in .NET and ASP.NET
  • Realize the severe consequences of unsecure buffer handling in native code
  • Understand the architectural protection techniques and their weaknesses
  • Learn about typical coding mistakes and how to avoid them
  • Get practical knowledge in using security testing tools
  • Get sources and further readings on secure coding practices

Audience

Developers

 

     Course Outline

  • IT security and secure coding
  • Web application security
  • Client-side security
  • Client-side security
  • .NET security architecture and services
  • Practical cryptography
  • Security relevant C/C++ programming bugs and flaws
  • Buffer overflow
  • Some additional native code-related vulnerabilities
  • Common coding errors and vulnerabilities
  • Knowledge sources
 

     Feedback (28)

I really liked the Crypto part

Carlos Ibarra


I liked the trainer was passionate about the subject and very convincing too.

Diana Vladulescu


I mostly was benefit from the hands-on examples.

Trading Point of Financial Instruments (XM


The subject of the course was very interesting and gave us many ideas.

Anastasios Manios


I generally enjoyed the interaction.

Andreas Hadjidemetris


Most of the known subjects related with secure coding covered and explained well Nice presentations Easy to watch, not boring.

Trading Point of Financial Instruments (XM


The way and its approach on each different section.

Trading Point of Financial Instruments (XM


The trainer has very good communication skills and can easily get & hold audience's attention. He can explain the matter in a very easy and detailed way so that each person can understand it.

Trading Point of Financial Instruments (XM


All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.

Kostas Bastas


Everything! I didn't have any experience with Secure Coding and the whole training was interesting and helpful.

Trading Point of Financial Instruments (XM


I genuinely enjoyed the real life examples.

Marios Prokopiou


I loved the delivery from the trainer's side. Very enthusiastic and made the training really pleasant and interesting. Also, very clear about the content he was delivering.

Trading Point of Financial Instruments (XM


I genuinely liked the real world scenarios.

Michail Alvanos


I genuinely liked the organization.

Panagiotis Foutros


Very good knowledge and character.

Constantinos Michael


I was benefit from the exercises (SQL injection, XSS, CRSF. .).

David Lemoine - Statistical Solutions


I liked the blend of theory/fundamentals/principles and activity/interactive-web-apps. Excellent mix.

Statistical Solutions


Good pacing, by switching between lectures and activities the trainer was able to hold my attention, good variety of topics covered, trainer was very knowledgeable and able to adapt the subject matter to what was required.

Statistical Solutions


Trainers command in his field

Adnan ul Husnain Hashmi - TDM GROUP


The hands-on labs were excellent.

Dr. Farhan Hassan Khan - TDM GROUP


The practical exercises

- Corvil


The hands-on approach to explain the concepts.

- Corvil


Exercise and be able to experiment.

- Corvil


The OWASP overview, especially slides with the specific examples of attacks. OWASP Zap tool.

- Corvil


I saw some security risk being easier to use than I expected It helped us to find some security holes in our Product

- Corvil


It's good to start with the cause and anderstand why we need to secure our application.

Mikron SA Boudry


The explanations of how the most common attacks happen against web applications.

Jacob Fisher - Mikron SA Boudry


Beginning by how to hack to better understand how to secure was very interesting and appreciated.

Raphaël Capocasale - Mikron SA Boudry


The course could be tailored to suit your needs and objectives. It can also be delivered on your premises if preferred.


  
  
  


  

Online Price per participant 6000 AED

  

Classroom Price per participant 6000 AED

Starts

 

Ends

 

  Workday courses take place between 9:30 and 16:30

Location


  Show venue details


Number of Participants






Related Courses

Total Courses 1


 

Comprehensive C# and .NET Application Security

  21 hours

Combined C/C++, JAVA and Web Application Security

  28 hours

C/C++ Secure Coding

  21 hours

Advanced Java Security

  21 hours

Combined JAVA, PHP and Web Application Security

  28 hours

Standard Java Security

  14 hours

Java and Web Application Security

  21 hours

Advanced Java, JEE and Web Application Security

  28 hours

.NET, C# and ASP.NET Security Development

  14 hours

Advanced C#, ASP.NET and Web Application Security

  21 hours

Secure coding in PHP

  21 hours

Microsoft SDL Core

  14 hours

Security Testing

  14 hours

Secure Web Application Development and Testing

  21 hours

Web Application Security

  14 hours



Discounted Public Courses



This site in other countries/regions