The class is a combination of lectures, security testing demonstrations, code review, and interactive threat modeling discussions. Students will learn the most common threats against applications. More importantly, students will learn how to code secure software via a variety of techniques such as secure design practices, defense-based coding, the use of security libraries and services, and the use of a variety of web security standards.

As part of this course, we will explore the use of third-party security libraries and frameworks to speed and standardize secure development. We will highlight production quality and scalable controls from various languages and frameworks including Java, PHP, Python, Javascript, and .NET, but any developer building web applications and webservices will benefit from this class.

Familiarity with the technical details of building web applications and webservices from a software engineering point of view.

Any laptop that can run an updated web browser and "Burp Community Edition".

Day 1 of the course will focus on web application basics.

Introduction to Security Goals and Threats

Day 2 of the course will focus on API secure coding, Identity, and other advanced topics.

Webservice, Microservice, and REST Security

The course will include several hacking and secure coding labs!

The major cause of webservice, microservice, and web application insecurity is insecure software development practices. This highly intensive and interactive 2-day course provides essential application security training for web application and webservice developers. 


Cisco
Cisco helps seize the opportunities of tomorrow by proving that amazing things can happen when you connect the unconnected. And, as a part of the Cisco portfolio, Webex Rooms connects people to productivity rather than getting in the way of it by promoting the ability for them to work where they want, when they want, and how they want to get stuff done. The world works better face to face, and whether there is a need to work remote or in-person, Webex Rooms delivers the collaboration tools for that authentic interaction. We are proud to have one of the largest R&D sites in Norway with over 400 employees, developing and designing collaboration tools!

Cisco Webex

Elastic

Palo Alto

Secure Code Warrior

NDC Security 2022

Rebel Oslo

Farfetch exists for the love of fashion. We operate a modular end-to-end technology platform purpose built to connect the luxury fashion ecosystem worldwide. Our vision was to create a single operating system that could address the complex demands of consumers and luxury sellers alike. Our platform is built on an API-enabled proprietary technology stack, which provides the foundation for the three main components: applications, services and data.

FarFetch

Avalonia

Blip

Bosch

Checkout

deloitte

We specialize in the development of financial software and help financial industry firms grow, adapt and gain a technological advantage by providing custom software solutions and sharing our FinTech expertise. We are committed to providing an individual approach to each customer, focusing on technical excellence and on delivering the best-in-class software products.

Devexperts

devscope

edreams

Evident

Kaizen Gaming

Kühne + Nagel

Since 1975, Microsoft has empowered every person and organisation on the planet to achieve more. Imagination and innovation drives today’s technology. Our software, services, devices, and solutions help users realise their full potential in incredible new ways – from AI to the cloud, we want to help every software developer create fast and create smart. At NDC London 2020, we’ll be helping all software developers and businesses accelerate technical skills through the Microsoft Learn platform, plus Q&As and expert insights from Microsoft’s Most Valuable Professionals.

Microsoft

We believe in a world of work where people can find their true self and achieve their full potential. This not only makes individuals more satisfied and happier, it also makes companies more successful. 
 
Based on this conviction, New Work SE aligns its brands, products and services around its vision – For a better working life. We’re already seeing a paradigm shift in terms of what we call ‘work’. Demographic change is exacerbating the shortage of skilled workers, in turn shifting power away from employers and over to employees.

Digitalisation is not only revolutionising entire industries, it also enables people to work wherever and whenever they want or need to. And younger generations, in particular, are eschewing long-standing values in favour of more modern ones with a clearer focus on a positive work-life balance.
 
All of these aspects are already driving radical change on the labour market. All of the activities undertaken by each New Work Group brand aim to help shape the future of work and gear it more towards people, while assisting companies in the pursuit of success by enabling employees to do what they really, really want to do.

New Work SE

Nexer

Innovating With No Limits Since 2001. In 2001, we pioneered the low-code market with a vision to transform how enterprise software is delivered.  Today, we’re proud to be recognized as a market leader with offices around the world and over 1.200 customers in 60 countries.

Outsystems

Planet

Semasio enables marketers to unify their targeting by understanding consumers on their own terms

At Semasio we believe the best way to understand modern consumers is on their own terms – the terms they consume every day on the web. This also means we understand the pages they consume based on the terms these pages contain.
The benefit of semantically understanding consumers and pages is the ability to seamlessly target across consumers and pages with one unified targeting strategy. We call it targeting on your terms.

Semasio

NDC Porto 2022

Alfândega Porto Congress Centre

Jim Manico is the founder of Manicode Security where he trains software developers on secure coding and security engineering. He is also an investor/advisor for KSOC, Nucleus Security, Signal Sciences, and BitDiscovery. Jim is a frequent speaker on secure software practices, is a Java Champion, and is the author of 'Iron-Clad Java - Building Secure Web Applications' from Oracle Press. Jim also volunteers for OWASP as the project co-lead for the OWASP ASVS and the OWASP Proactive Controls.

Building Secure API's and Web Applications

Student Requirements:

Laptop Requirements: