The most trusted source for computer security training, certification and research.

select a course
Global Information Assurance Certification

The Best Information Security conference I have attended yet.
-Chris Bimson, Compass Systems, Inc.

DEVELOPER 536

Secure Coding for PCI Compliance

6 CPE Credits per day

The audit procedure documents for PCI 1.2 tell the auditor that they should look for evidence that web application programmers in a PCI environment have had "training for secure coding techniques." The problem that many business are facing, however, is, "What is that and where can I get it?" This course packs a thorough explanation and examination of the OWASP top ten issues, which are the foundation of the PCI requirement, into a two day course.

Throughout the course we will look at examples of the types of flaws that secure coding protects against, examine how the flaw might be exploited and then focus on how to correct that code. Coupled with the lectures, there are more than ten hands on exercises where the students will have the opportunity to test out their new skills identifying flaws in code, fixing code and writing secure code. All of the exercises are available in Perl, PHP, C/C++, Ruby and Java. This will allow the student to try their hand at any of the major web application coding languages that they work with in addition to some of the supporting languages that might be at work behind the scenes. Students are not required to be familiar with all of these languages but should be proficient in at least one of them. Lectures are presented using a more or less code-neutral format.

Pre-requisites: Students should have at least several months of coding experience, preferably web application coding experience. It is best if the student is familiar with one of the following languages: Perl, PHP, C, C++, Java or Ruby.

For more information on this course, visit author Dave Hoelzer's Blog: http://www.sans.org/info/29399

The industry knowledge of the SANS instructors is without compare and the free night courses add immeasurable value to the conferences.
-Ken Rode, Unapen, Inc.

Training Events By Course