SANS Training courses
The audit procedure documents for PCI 1.2 tell auditors that they should look for evidence that web application programmers in a PCI environment have had "training for secure coding techniques." The problem that many businesses are facing, however, is, "What is that and where can I get it?" This course packs a thorough explanation and examination of the OWASP top ten issues, which are the foundation of the PCI requirement, into a two day course.
Throughout the course we will look at examples of the types of flaws that secure coding protects against, examine how the flaw might be exploited and then focus on how to correct that code. Coupled with the lectures, there are more than ten hands on exercises where the students will have the opportunity to test out their new skills identifying flaws in code, fixing code and writing secure code. All of the exercises are available in Perl, PHP, C/C++, Ruby and Java. This will allow the student to try their hand at any of the major web application coding languages that they work with in addition to some of the supporting languages that might be at work behind the scenes. Students are not required to be familiar with all of these languages but should be proficient in at least one of them. Lectures are presented using a more or less code-neutral format.
For more information on this course, visit author Dave Hoelzer's Blog:
Students should bring a laptop with their current development environment pre-installed so that they can work through the programming problems in an environment that they are comfortable in. We strongly recommend that the system be well patched in the event that the student chooses to participate in the extensive group exercises that will require a wireless 802.11 adapter. We will provide all of the exercise materials, a fallback development environment, and a virtual Apache appliance on a CD with all of the exercise materials.
Students should have at least several months of coding experience, preferably web application coding experience. It is best if the student is familiar with one of the following languages: Perl, PHP, C, C++, Java or Ruby.
You might also like
|
Mastering Krav Maga (Volume I) 6 DVD Set -- Self-Defense (Beginner to Advanced) DVD (ISRAELI KRAV MAGA/CS)
|
|
1920 Ad Battle Creek Sanitarium School Nurse Dietitian Physical Training Health - Original Print Ad Entertainment Memorabilia (Authenticated)
|
|
Wallmonkeys Freefall Parachute Jumpers Approaching the Trident Drop Zone in San Diego Peel and Stick Wall Decals (24 in W x 16 in H) Home (Wallmonkeys)
|
|
Hadoop Fundamentals for Data Scientists [Online Code] Digital Software (Infinite Skills Inc.)
|
|
Tacx Real Life Milan San Remo DVD for Virtual Reality Trainer Sports (Tacx)
|
Q&A
Are their any Firearms training course in San Diego? | Yahoo Answers
IMHO, i would always recommend self-studying the official guide of CISSP. the key are those concepts, better spend more time on the essential concepts in the 10 domains. reading through the other parts of the guide is just for better understanding on the essential concepts.
it's not that difficult. i passed my CISSP and CISA after reading the official guide for a few weeks.
participating this kind of training course not only costs you a lot of money, but it also forces you to understand other people understanding on the same concepts defined by the same official guide. why second hand…
EMT Training in San Francisco - accelerated course? | Yahoo Answers
I'm considering going through an EMT training course to learn the skills (not to work as an EMT). I understand that this involves some hospital and ambulance-ride-along component, which seems like great ways to learn while also helping the community. I've heard that some full-time courses can be...
