Global Learning for Operational Leaders
Classroom
16 sessions
Scroll for more
Online / Live
16 sessions
Scroll for more
Introduction
Course overview
Many breaches exploit vulnerabilities in applications and APIs. Building security into software development is far more effective and cheaper than fixing problems after release.
This Aractech course covers common application vulnerabilities, secure design principles, threat modelling, secure coding practices, security testing including static and dynamic analysis, API security, software supply chain security and integrating security into DevOps. Participants perform threat modelling and review code examples.
The course suits developers, architects and security professionals.
What you will achieve
Learning objectives
- Explain common application vulnerabilities
- Apply secure design and threat modelling
- Use secure coding practices
- Integrate security testing into development
- Secure APIs and software supply chains
- Build a secure development life cycle
Who should attend
Target audience
- Software developers
- Application architects
- Security engineers
- DevOps engineers
- QA and testers
- IT managers
Methodology
Learning approach
- Technical presentations
- Threat modelling workshop
- Code review exercises
- Tool demonstrations
- Case studies
Complete course outline
Five focused days of learning and application
The timings provided are estimates and may vary depending on the number of participants and the discussions taking place during the sessions. They are indicative only and do not constitute a binding commitment.
Day 1
Application Security Fundamentals
- Why applications are attacked
- Common vulnerabilities
- Security principles
- Secure development life cycle
- Coffee break
- Secure development life cycle (continued)
- Case study: Application breach
- Exercise: Vulnerability examples
Day 2
Secure Design
- Threat modelling
- Architecture risks
- Authentication and authorisation
- Data protection
- Coffee break
- Data protection (continued)
- Design reviews
- Workshop: Threat model
Day 3
Secure Coding
- Input validation
- Output encoding
- Session management
- Error handling
- Coffee break
- Error handling (continued)
- Secrets management
- Exercise: Code review
Day 4
Security Testing
- Static analysis
- Dynamic analysis
- Dependency scanning
- Penetration testing
- Coffee break
- Penetration testing (continued)
- API testing
- Demonstration: Testing tools
Day 5
DevSecOps
- Pipeline integration
- Software supply chain
- Metrics
- Coffee break
- Metrics (continued)
- Training developers
- Roadmap
- Capstone: Secure SDLC plan
FAQ
Frequently asked questions
What does Application Security and Secure Software Development (IMCS-027) cover?
This course covers IT Management and Cyber Security through a structured five-day outline focused on practical application, discussion, and implementation planning.
When is the next available session?
The next scheduled session starts on 2 - 6 November 2026. See the course schedules section for the available dates and delivery formats.
Who should attend this course?
Software developers, Application architects, Security engineers
Is bilingual course delivery available?
Yes. All course materials and presentations are provided in English, while bilingual explanation and discussion support may be available depending on the selected location and trainer availability. For example, when attending a course in Istanbul, you may request a Turkish-speaking trainer to explain the English course content in Turkish. Arabic explanation support may also be requested at this location. Other languages are available in selected cities. You can choose your preferred language support as an optional preference during registration.
How can I register for a session?
Use any Register button next to the available course dates to open the participant registration page and submit your booking request for the selected session.
Is this course available online as well as classroom-based?
Check the course schedules section for currently published classroom and Online / Live sessions.
Where are classroom sessions delivered?
Current classroom venues include Barcelona, London, Munich, Istanbul, Vienna, Paris, Frankfurt, Rome.
How long is the training programme?
The programme runs for five days from 09:00 to 14:00, which gives 25 contact hours, including a daily 30-minute break (22.5 hours of instruction).
Quick request
Send quick request
Send a fast enquiry about this course and the academy team will get back to you.
Get a quotation
Request a formal quotation
Choose an available date and venue, add your participants, and we will email a formal quotation for Application Security and Secure Software Development to your business address.