Secure Coding in Go
56mIntermediate2021-11-30
Authors
Miki Tebeka
CEO at 353Solutions
Course details
The Go programming language is growing in popularity. Unfortunately, security issues for Go applications are also on the rise. In this course, learn how to secure your Go application to prevent hackers from stealing data or crashing it. Instructor Miki Tebeka explains why developers should care about security, as well as how to prevent SQL injection attacks, identify places where sensitive data is stored and avoid exposing it to the outside world, write code that protects the integrity of the system, and more. Along the way, he provides challenges that allow you to put your new skills to the test.
Skills covered
GoSoftware Development SecurityGoogleCybersecurityProgramming LanguagesSoftware DevelopmentOne-Off
Concepts
Introduction
- Why care about security
- What you should know
Security Overview
- Security risks overview
- CVEs
- OWASP Top 10
- Case studies
Input
- Overview of input processing
- SQL injection
- Setting timeouts
- Size limiting
- Input validation
- Challenge - Secure input
- Solution - Secure input
Output
- Overview of output issues
- Cross-site scripting (XSS)
- Sensitive data
- Terminating HTTP handlers on error
- Challenge - Securing output
- Solution - Securing output
Authentication and Authorization
- Overview of authentication issues
- Authentication
- Authorization
- Challenge - Limit access
- Solution - Limit access
Infrastructure
- Overview of infrastructure security
- Security configuration
- Keeping secrets
- Dependency management
- Logging and metrics
- Challenge - Secure project
- Solution - Secure project
Process
- Include security in your process
- The security mindset
- Linters
- Security audits
Conclusion
- Next steps