CISSP - Software Development Security

Course details

NOTE: Last update - November, 2017

Welcome to this course: CISSP Certification - Software Development Security. Software is usually developed with a strong focus on functionality, not security. This course covers foundational concepts in various software development life cycle models, and it discusses security requirements in software development processes and assurance requirements in the software. In many cases, security controls are bolted on as an afterthought (if at all). To get the best of both worlds, security and functionality would have to be designed and integrated at each phase of the development life cycle. Security should be interwoven into the core of a product and provide protection at the necessary layers. This is a better approach than trying to develop a front end or wrapper that may reduce the overall functionality and leave security holes when the software has to be integrated into a production environment.

In this course, you'll learn:

• Supporting investigations
• Common software development issues
• Software development life cycles
• Secure software development approaches
• Development/operations integration (DevOps)
• Change control and configuration management
• Security of code repositories
• Programming language types
• Database concepts and security issues
• Malware types and attacks

This course will help you to enter the exam room with confidence, knowing that you have done all you can to prepare for the big day. So let's get started.