Application Security Fundamentals

We walk through core security principles from the ground up that everyone involved in the development process should know. Expect real-world stories alongside concrete examples of problematic areas.

What you will learn:

• Why do we address application security?
• How do attackers think?
• OWASP Top 10 – the most common application vulnerabilities
• Logging and monitoring – what and when to log, and what to avoid
• Authentication and authorization – BFLA, BOLA, BOPLA, event-driven scenarios, centralization and least privilege

How to adopt security tooling in the SDLC without drowning in false positives: static analysis, dependencies, and vulnerability checks.

What you will learn:

• SAST – the role of static code analysis, tooling, and triaging findings
• SCA & Supply chain: How to tackle dependency issues in different situations
• Vulnerability scanners and linters

We connect systematic vulnerability discovery with remediation.

What you will learn:

• Identifying excessive resource use, rate limiting
• WAF, RASP
• How to avoid exhausting third-party quotas and resources
• Finding and fixing typical vulnerabilities

A short introduction to AI tools in software development – follow-up training: AI-first development, safely.

What you will learn:

• Which tools can make everyday engineering easier?
• What to watch out for
• General best practices