CSSLP Cert Prep: 3 Secure Software Design
2h 6mIntermediate2021-02-26
Authors
Jerod Brennen
Security Architect, Advisor, Speaker, Teacher
Course details
Secure software design helps you eliminate the design flaws that attackers exploit—before your app ever makes it to production. In this course, the third installment of the CSSLP Cert Prep series, instructor Jerod Brennen dives into the subject of app security, helping prepare you for the third domain of the Certified Secure Software Lifecycle Professional (CSSLP) exam: Secure Software Design. Jerod discusses threat modeling, security architecture, and security design. Learn how to identify and prioritize the right controls for your style of architecture, including mobile and cloud-based architectures. Discover security-enhancing tools to diagnose and repair design flaws. Find out how to design adequate security controls for your network, servers, data, and application, and explore how data modeling and classification can make your security efforts more targeted and cost-effective.
Topics include:
Threat modeling
Identifying and prioritizing controls
Cloud architectures
Component-based systems
Designing network, sever, and data controls
Secure design principles and patterns
Data modeling and classification
Topics include:
Threat modeling
Identifying and prioritizing controls
Cloud architectures
Component-based systems
Designing network, sever, and data controls
Secure design principles and patterns
Data modeling and classification
Skills covered
Software Development SecurityCybersecurityCert Prep
Concepts
0. Introduction
- 01 - Secure software design
1. Threat Modeling
- 02 - What is threat modeling
- 03 - Understand common threats
- 04 - Attack surface evaluation
2. Security Architecture
- 05 - Identifying and prioritizing controls
- 06 - Traditional security architectures
- 07 - Pervasive and ubiquitous computing
- 08 - Identifying and prioritizing controls
- 09 - Cloud architectures
- 10 - Embedded system considerations
- 11 - Architectural risk assessments
- 12 - Component-based systems
- 13 - Security enhancing tools
- 14 - Cognitive computing
- 15 - Control systems
3. Security Design
- 16 - Components of a secure environment
- 17 - Designing network and server controls
- 18 - Designing data controls
- 19 - Secure design principles and patterns
- 20 - Secure interface design
- 21 - Design security review
- 22 - Secure operational architecture
4. Modeling
- 23 - Nonfunctional properties and constraints
- 24 - Data modeling and classification
Conclusion
- 25 - Next steps