CYB204 – Secure Applications and DevSecOps

Security by design in the software development life cycle is critical for organisations, in order to reduce the likelihood of application vulnerability exploitation by adversaries. This unit comprises the principles of security and compliance for DevSecOps and Secure Applications. Topics covered include the Continuous Delivery (CD) model for secure software development, practitioner know-how on cybersecurity software design and development, adoption of cutting-edge software security tools for data validation, fuzzing, buffer overflow analysis and run-time software bug detection.

Other topics include change management for continuous development, compliance as a code and auditing for software-based defences and toolkits.  

Learning Outcomes:

• Design for continuous development of secure software code and injection of security into the DevOps process
• Explain historical software security and development approaches to demonstrate security by design in software coding
• Plan and design runtime defences based on principles of secure coding
• Use software security tools for analysis of software code and security vulnerabilities based on concepts of data validation, fuzzing, buffer overflows and run time software bugs