WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2021 • Jun 30, 2021

Software Security 101: Secure Coding Basics

Thomas Konrad

Are you sacrificing software security for faster release cycles? Discover how to prevent crippling technical debt by mastering foundational secure coding practices and architectural threat modeling.

Pause
Mute Enter Fullscreen
#1 about 8 min

Understanding the importance of building secure software systems

Early integration of security practices reduces future costs and technical debt.

#2 about 15 min

Establishing core security terms and design principles

Understanding key concepts like technical debt, bugs versus flaws, and defense in depth establishes communication baselines.

#3 about 18 min

Evaluating programming languages by their security criteria

Programming attributes like memory safety, type strictness, and sandbox support heavily impact overall application robustness.

#4 about 20 min

Validating and encoding inputs to prevent injection attacks

Differentiating input validation from sanitization safely embeds untrusted data into target structures.

#5 about 17 min

Implementing strong cryptography, session management, and concurrency

Establishing non-guessable session identifiers and avoiding race conditions prevents severe logic exploits.

#6 about 13 min

Identifying and mitigating top software vulnerability classes

Navigating recognized vulnerability lists like OWASP Top 10 establishes targeted defensive strategies.

#7 about 6 min

Managing risks associated with generic third-party dependencies

Mitigating potential exploits introduced by external code requires automated dependency auditing inside deployment pipelines.

#8 about 7 min

Integrating security into the software development process

Shifting left using the OWASP Software Assurance Maturity Model discovers design flaws effectively early.

#9 about 7 min

Recommended training platforms for developing security mindsets

Exploring deliberately vulnerable applications and educational environments helps developers practice active hacking techniques.

#10 about 14 min

Answering audience questions on practical application security

Expert insights address discovering vulnerabilities, static analysis tool selection strategies, and memory management considerations.

Matching moments

2:05 min

Making security a foundational feature in software development

Eileen Uchitelle Eileen Uchitelle +1 · Coffee With Developers

7:46 min

Defining fundamental starting points for software application security

LIVE

7:16 min

Addressing developer adoption and future software security risks

Anna Fritsch-Weninger · LIVE

5:25 min

Introduction to secure development and OWASP SAMM

Mathias Tausig · LIVE

5:30 min

Identifying non-coding software vulnerabilities and organizational risks

Tino Sokic · World Congress 2023

2:22 min

Introduction to speaker and software security concepts

Sebastian Leuer Sebastian Leuer · World Congress 2024

More from World Congress 2021

Micro Frontends with Module Federation: Why and How? thumbnail
45:40
about 5 years ago

Micro Frontends with Module Federation: Why and How?

Manfred Steyer

Data Science on Software Data thumbnail
48:10
about 5 years ago

Data Science on Software Data

Markus Harrer

The journey from developer to devops - what i've learnt along the way thumbnail
42:44
about 5 years ago

The journey from developer to devops - what i've learnt along the way

Liam Hurrel, Alireza Chegini

How Data is Shaping our Games thumbnail
43:30
about 5 years ago

How Data is Shaping our Games

Johanna Pirker

Cross platform Augmented Reality development with React Native thumbnail
40:50
over 5 years ago

Cross platform Augmented Reality development with React Native

Vladimir Novick

How to Build a Monetization Strategy Based on User's in-app Behavior thumbnail
38:59
over 5 years ago

How to Build a Monetization Strategy Based on User's in-app Behavior

Natalie Sieradzki

Upcoming sessions on this topic

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

Speed or Security? Why Not Both for Your Coding Agents

  • Ajeet Raina

    Docker

    Developer Advocate

Open session

Teaching AI Coding Agents to Build It Right the First Time

  • Sajeetharan Sinnathurai

    Microsoft

    Principal Product Manager

Open session

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

  • Hadar Geva

    Myop

    CTO & Co-founder

Open session

How We Cut Our API's p99 Latency from Minutes to Under a Second

  • Deepak Agrawal

    Atlassian

    Principal Software Engineer

Related videos

Security Pitfalls for Software Engineers thumbnail
27:32
World Congress 2023 • about 3 years ago

Security Pitfalls for Software Engineers

Jasmin Azemović

101 Typical Security Pitfalls thumbnail
28:41
World Congress 2022 • over 4 years ago

101 Typical Security Pitfalls

Alexander Pirker

Climate vs. Weather: How Do We Sustainably Make Software More Secure? thumbnail
51:41
LIVE • over 4 years ago

Climate vs. Weather: How Do We Sustainably Make Software More Secure?

Maturity assessment for technicians or how I learned to love OWASP SAMM thumbnail
1:41:05
LIVE • over 4 years ago

Maturity assessment for technicians or how I learned to love OWASP SAMM

Mathias Tausig

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together thumbnail
23:34
World Congress 2022 • over 4 years ago

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together

Stefania Chaplin

What The Hack is Web App Sec? thumbnail
24:01
Coffee With Developers • over 1 year ago

What The Hack is Web App Sec?

Jackie

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.