Paikka

Jyväskylän yliopisto,Ylistönrinne Survontie 9 C, mikroluokka YFL349.

Overview

Two-day training introduces participants to wide range of secure development topics

• Training is intended to all persons participating to software development in different roles
• Training includes hands on exercises in TryHackMe learning environment

Prerequisites

The basics of the Linux command prompt (shell) for doing exercises

Learning goals

Participants…

• Understand common concepts of information and cybersecurity
• Understand the current security landscape
• Have understanding on how to identify and manage security risks and threats
• Are familiar with attacker mindset and can perform simple penetration tests
• Get excited to learn more

Harjoitteluympäristö

TryHackMe -ympäristö jää osallistujan käyttöön kuukaudeksi koulutuksen jälkeen.

Hinta

Koulutuksen hinta riippuu sen osallistujamäärästä. Koulutuksen tiedoissa esitetty sopimuskumppanin hinta 1300 € + alv on laskettu 7 osallistujalle.

Osallistujamäärän noustessa laskemme hintaa seuraavalla tavalla:
8 osallistujaa: 1180 € + alv
9-10 osallistujaa: 1080 € + alv
11-12 osallistujaa: 940 € +alv
13- osallistujaa: 840 € +alv

Koulutuksen (suuntaa-antava) aikataulu ja sisältö

Day 1

• 9:00 Information and cyber security introduction
  • Introduction to TryHackMe
• 10:15 Break
• 10:30 Current security landscape
  • Common security threats
  • OWASP Top 10
• 11:30 Secure Development Lifecycle overview
• 12:00 Lunch
• 13:00 Security goals and requirements in software development
  • Security goals and continuous development
  • Security requirement types and compliance
• 14:00 Break
• 14:15 Secure design principles
  • Threat modelling
• 15:45-16:00 Summary of day 1

Day 2

• 9:00 Secure coding principles
  • Common application security threats
  • Best practices and guidelines
  • Injection threats
• 10:15 Break
• 10:30 Secure testing
  • Hacker mindset
  • Security testing strategies for different types of software
  • Security testing tools
• 12:00 Lunch
• 13:00 Secure testing continues
  • Web application and API testing
  • Broken access control, XSS, SQLi, CSRF
• 14:15-14:30 Security testing wrap-up
• 14:30 Break
• 14:45 Secure deployment and maintenance
  • Vulnerability management
  • Incident response
• 15:45-16:00 Summary of the course