CSSLP Cert Prep: 4 Secure Software Implementation

Explore topics to prepare for the CSSLP exam. This course focuses on Domain 4: Secure Software Implementation/Programming, covering deployments, fixing vulnerabilities, and more.

Introduction

• Secure software implementation

1. Secure Coding Practices

• Declaring variables
• Inputs and outputs
• Protecting secrets
• Data flow security
• Deployment and operations
• Isolation techniques
• Processor microarchitecture security

2. Finding and Fixing Vulnerabilities

• Identifying risks
• The OWASP Top 10: 1–5
• The OWASP Top 10: 6–10
• Common Weakness Enumeration (CWE)
• Addressing risks

3. Component Security

• Third-party code and libraries
• Component integration
• Implementing security controls
• Security in the build process

Conclusion

• Next steps