Security in Programming

Threat modelling, secure coding, injection, memory safety, identity, access control, cryptography, web and API security, supply chain, cloud, devices, privacy and DevSecOps — 21 modules of defensive practice, every output from a real run.

Lessons

• Testing, Fuzzing, and Security Verification
• Dependency and Software-Supply-Chain Security
• Cloud, Containers, Infrastructure, and Secrets
• Mobile, Desktop, Embedded, and IoT Security
• Privacy, Data Protection, and Secure Telemetry
• Resilience, Incident Response, and Recovery
• Security Foundations and Mindset
• Threat Modeling and Secure Requirements
• Secure Coding Foundations
• Input Validation, Output Encoding, and Injection Prevention
• Memory Safety and Language-Specific Risks
• Secure SDLC, DevSecOps, and Governance
• Advanced Topics and Security Engineering at Scale
• Labs, Capstone Projects, and Assessment
• Standards, References and Glossary
• Authentication, Passwords, MFA, and Identity
• Authorization, Access Control, and Multi-Tenancy
• Cryptography and Key Management
• Web Security: Browser, HTTP, and Sessions
• API Security and Service-to-Service Trust
• Database, File, Deserialization, and Command Security
• Secure Architecture and Design Patterns
• Course Overview