Firesand Learning

This course is the first in the suite of Foundational Secure Software Engineering courses. It introduces key concepts such as:

• The CIA Triad,
• Risks,
• Vulnerabilities, and
• Controls

It also discusses other topics, such as, where do software vulnerabilities come from and where can they be found.

This is the third course in the suite of Foundational Secure Software Engineering courses. 

This course introduces concepts that help shape, or frame, the software engineers way of thinking whilst designing a solution. These concepts, however, do not only apply to the design phase/stage of software development, but should also be applied throughout all pages of software.

This course covers:

• Architectural Principles
• High-level Architectural Principles, based around Confidentiality, Integrity, and Availability
• Supporting Principles, such as Defence in Depth, Least Privilege.
• Other architectural concerns, such as patterns and frameworks.

This is the fifth and final course in the suite of Foundational Secure Software Engineering courses.

This course helps software engineers to poke and prod at their own applications and to identify security issues in their own system. It does not, however, aim to create penetrations tests. 

The course covers:

• Application attack surface - Introduction, spidering, and metafiles.
• Conducting basic security checks - Testing: authentication, authorisation, parameters, and encoded parameters.