CertNexus Cyber Secure Software Developer (CSSD) Exam CSD-110 Courseware (CNX0022SE)
The stakes for software security are high, and yet many development teams overlook it until it's too late—if they address it at all. To ensure successful implementation, it is crucial for developers to manage security and privacy issues throughout the entire software development lifecycle, rather than addressing them only after coding or during delivery preparation.
This course presents an approach for dealing with security throughout all phases of the software development lifecycle. You will identify the fundamentals of security, including the vulnerabilities and attacks that compromise it. You will also employ general strategies for addressing security risks to your software projects, as well as specific tactics for identifying and remediating those risks. Ultimately, you will acquire the skills it takes to secure all facets of a software project, beyond just the code itself.
This course is designed for any business professional involved in the software development process who desires or is required to develop highly secure software for organizational use. Candidates may be programmers, testers, architects, or any other personnel whose daily job duties involve directly building software; or, they may be project leaders, software engineers, and DevOps personnel who perform additional technical and non-technical duties as part of the overall software development lifecycle.
This course is also designed to assist candidates in preparing for the CertNexus Cyber Secure Software Developer™ (CSSD) Exam CSD-110 certification.
Benefits
In this course, you will employ best practices to develop secure software.
You will:
- Identify fundamental security concerns in software development.
- Leverage the secure software development lifecycle (SSDLC).
- Define secure software requirements.
- Design software for security.
- Implement security protections in software.
- Test software security.
- Maintain security in deployed software.
- Prepare to defend against cyber attacks.
Teaching This Course
The publisher has provided details here on how to teach this CertNexus Cyber Secure Software Developer (CSSD) Exam CSD-110 course.
Outline
- Lesson 1: Identifying Fundamental Security Concerns in Software Development
- Topic A: Identify the Need for Software Security
- Topic B: Identify Factors That Undermine Software Security
- Topic C: Identify Fundamental Principles of Cybersecurity
- Topic D: Identify Common Vulnerabilities in Software
- Topic E: Identify Common Attacks and Exploits Against Software
- Lesson 2: Leveraging the Secure Software Development Lifecycle
- Topic A: Apply the Builder/Breaker Approach
- Topic B: Incorporate SSDLC Practices and Methodologies
- Topic C: Apply SSDLC Practices in the Use of AI
Topic D: Incorporate Governance, Risk Management, and Compliance (GRC) in the SSDLC - Topic E: Identify Key Roles in the SSDLC
- Topic F: Foster a Security-First Organizational Culture
- Lesson 3: Defining Secure Software Requirements
- Topic A: Define Compliance Requirements
- Topic B: Define Security Requirements
- Lesson 4: Designing for Security
- Topic A: Apply General Principles for Secure Design
- Topic B: Define the Security Architecture
- Topic C: Conduct Threat Modeling
- Lesson 5: Implementing Security Protections
- Topic A: Implement Cryptography
- Topic B: Implement Application Security Parameters and Configurations
- Topic C: Implement Access Control
- Topic D: Protect Database Access
- Topic E: Implement Error Handling and Logging
- Lesson 6: Testing Software Security
- Topic A: Perform Security Tests
- Topic B: Analyze Software to Identify Security Issues
- Lesson 7: Maintaining Security in Deployed Software
- Topic A: Implement Secure Deployment Processes
- Topic B: Ensure Device Security
- Topic C: Monitor Deployed Software
- Topic D: Maintain Security After Deployment
- Topic E: Decommission Legacy Assets
- Lesson 8: Preparing to Defend Against Cybersecurity Attacks
- Topic A: Identify the Stages of the Cyber Kill Chain
- Topic B: Continuously Analyze the Cybersecurity Landscape
- Topic C: Continuously Improve Secure-Coding Knowledge and Skills
- Appendix A: Mapping Course Content to CertNexus Cyber Secure Software Developer™ (CSSD) Exam CSD-110
- Appendix B: Mapping Software Security Issues to Mitigation Tactics
Required Prerequisites
Although this course uses languages like Python®, SQL, and JavaScript® to demonstrate various programming concepts, you do not need to have experience in any specific languages to benefit from this course. However, you should have some programming experience, whether it be developing desktop, mobile, web, or cloud applications. Logical Operations provides a variety of courses covering software development that you might use to prepare for this course, such as:
- Introduction to Programming with Python® (Second Edition)
- Advanced Programming Techniques with Python® (Second Edition)
- R Programming for Data Science
- Web Development with HTML5, CSS, and JavaScript™
- SQL Querying: Fundamentals (Third Edition)
License
LicenseRequest More InformationRequest Trainer Evaluation CopyWhat is Included?
- Student Manual
- Student Class Files
- Extra Trainer Files
- PowerPoint Presentation
*Labs must be purchased from the lab provider.
