Secure Programming Techniques

• Sigurnosne prijetnje
• Sigurnosne tehnologije
• Sigurnosni skeneri
• Web aplikacija
• Penetracijsko tesiranje CERT inicijativa sigurnog kodiranja OWASP preporuke sigurnog kodiranja NASA 10 pravila za razvoj sigurnog kritičnog koda
• Principi zaštite osjetljivih podataka
• Implementacija restriktivnih politika
• Zaštita klijentske strane
• Postavljanje korisničkih ograničenja
• Principi rada sa datotekama
• Defenzivni dizajn programskog koda
• Ofenzivno programiranje
• Tehnike sigurnog programiranja

1. Expose the option of using defensive programming concepts to protect the security aspects of the application.
2. Assess the risks of using an individual HTTP method
3. Design a system that is resistant to the most common security risks
4. Choose application implementation methods that prevent SQL Injection attack from application resources
5. Compare ways to work with files that will prevent unauthorized use of the data contained therein
6. Recommend to use the lifecycle maintenance program of all members of the development team

Required reading

• Jim Manico, August Detlefsen,Iron-Clad Java: Building Secure Web Applications,Oracle press, 978-0-07-183588-6, 2014
  Fred Long i dr.,Java Coding Guidelines: 75 Recommendations for Reliable and Secure Programs (SEI Series in Software Engineering),,Addison-Wesley, 978-0-321-93315-7, 2013
  Fred Long i dr.,The CERT Oracle Secure Coding Standard for Java (SEI Series in Software Engineering),Addison-Wesley, 978-0-321-80395-5, 2012