Principles of Software Security

Course Description

The Principles of Software Security course provides the foundation to inspire developers and other team members to start taking security seriously. This modular course can be delivered as a full-day offering, or depending on your needs, can be focused on one of the primary modules as a half-day course.

The half-day Introduction module first identifies current software security problems, and then addresses the issues by explaining how to infuse software security into the development process early on. This module elucidates the Synopsys concept of “Building Security In” as opposed to relying solely on traditional security and testing practices.

The Requirements half-day module focuses on introducing important cost-saving software security requirements early in the software development life cycle. Students learn the details of and the causes behind secure coding errors and mistakes in this data-centric module, and how these software security defects are exploited. They also learn the practices that help prevent the most common mistakes.

Learning Objectives for the Introduction Module

At the end of this course, you will be able to

• Recognize the importance of software security
• Identify the obstacles that software security faces
• Understand the characteristics of a successful software security initiative
• Describe key software security activities

Learning Objectives for the Requirements Module

At the end of this course, you will be able to

• Recognize common attacks on software
• Recognize common solutions and patterns to mitigate attacks on data, functionality, and resources
• Recognize security requirements to mitigate common vulnerabilities