Cybersecurity
Cybersecurity Fundamentals
Protect systems and data. Learn core security concepts, common threats, and defenses every professional and business needs…
USD 89
Secure Coding Practices
Write web application code that resists injection, cross-site scripting, broken authentication and other common flaws, and verify it with reviews and security testing tools.
About this course
Stop vulnerabilities at the source. Learn input validation, authentication, and defenses against common flaws like injection and XSS.
What you will learn
- Build a simple threat model for a feature and turn the threats into concrete security requirements
- Prevent SQL and command injection using parameterised queries and safe APIs
- Defend web applications against XSS and CSRF with output encoding, cookie settings and tokens
- Implement secure authentication, session handling, secrets management and safe error logging
- Design APIs with proper authentication, object-level authorisation, validation and rate limiting
- Find and fix vulnerabilities using security code review, SAST, DAST and dependency scanning
Curriculum
Module 1Security in the SDLC4 lessons
- 1Why Developers Own Security Free preview
- 2Threat Modelling for Developers
- 3Security Requirements
- 4Secure Design Principles
- QModule quiz (4 questions)
Module 2Common Vulnerabilities4 lessons
- 5Injection Attacks and Prevention
- 6Broken Authentication and Sessions
- 7XSS and CSRF Explained
- 8Insecure Deserialization and Dependencies
- QModule quiz (4 questions)
Module 3Writing Secure Code4 lessons
- 9Input Validation and Output Encoding
- 10Secrets Management in Code
- 11Error Handling and Logging Safely
- 12Secure API Design
- QModule quiz (4 questions)
Module 4Verification4 lessons
- 13Code Review for Security
- 14SAST and DAST Tools
- 15Dependency Scanning
- 16Course Project: Fix a Vulnerable App
- QModule quiz (4 questions)
PFinal project: Fix a Vulnerable App: Duka Notes Security Remediation
Who this course is for
- Junior and mid-level developers who build web applications or APIs
- Computer science students and bootcamp graduates preparing for professional development work
- Testers, technical leads and IT staff who review or manage software projects
Requirements
- A computer with a code editor and Python 3 installed (examples are mainly in Python, with some JavaScript)
- Basic programming knowledge, including functions, HTTP requests and simple SQL queries
- Optional: Docker, to run intentionally vulnerable practice applications safely on your own machine
What is included
Written lessons
16 lessons, each with a practical exercise and key points to remember.
Module quizzes
A short quiz at the end of each module. Pass mark 70%, and you can retake it.
Final project
Fix a Vulnerable App: Duka Notes Security Remediation. A practical brief with steps and a way to check your own work.
Certificate
A certificate of completion from EMFAD Courses with a unique code anyone can verify.
How the certificate works
Complete every lesson and pass every module quiz with 70% or more. Your certificate then appears in your learner area, ready to print or save as PDF. It shows your name, the course title, the completion date and a unique code. It is a certificate of completion from EMFAD Courses, not an accredited qualification.
More in Cybersecurity
All →Cybersecurity
Digital Forensics Introduction
Investigate security incidents. Learn evidence collection, analysis, and reporting to trace and understand digital attacks.
USD 39
Cybersecurity
Identity and Access Management
Control who accesses what. Master authentication, authorization, single sign-on, and least-privilege to secure users and…
USD 39