Explore potential dependency issues, the risks associated with them, and learn how to avoid them.
- Dependency Management is often the bane…of software engineering.…When it comes to security-related topics,…it's even more so of a problem.…Many times when we write software,…we can write the most secure code ever…and still be susceptible to security vulnerabilities…because of a dependency.…We all know the stories of the old and vulnerable component…that caused a system, its data, or worse,…all the customer data to become exposed.…
Some of these leaks have been so bad…that they put a large portion of the population at risk…for credit fraud or identity theft.…This is something we must always remember…when writing software and trying to secure it.…So obviously, the exploit is out of our control…since we don't own the code.…Now, if it's an unpatched defect,…we could of course fix it ourselves…assuming it is open source code.…However, that still is a process.…
The reality is however, that many…of the vulnerabilities have already been discovered.…These discoveries are documented…and often, they indicate the dependency inversion number…
AuthorFrank P Moley III
- Understanding attackers and risks
- Documenting your risks
- Issues related to web client–server interactions
- Issues related to thick app and client–server interactions
- Authorization and cryptography issues
- Implementing security in each phase of the software development life cycle
Skill Level Beginner
Web Security: OAuth and OpenID Connectwith Keith Casey1h 26m Intermediate
Programming Foundations: Design Patternswith Elisabeth Robson2h 19m Intermediate
What you need to know1m 35s
1. Security and Risk Overview
2. Web Client Server Interaction Code Issues
3. Thick App and Client-Server Interaction Issues
4. Crypto and Security Misuse Issues
5. Security in the SDLC
Next steps2m 10s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.