Early access — first lesson of every course is free6,498 lessons liveLaunch pricing locked for founding membersNo subscription, ever
browse →
CyberCoreSchool
HOME / CATALOG / SOFTWARE SECURITY FUNDAMENTALS
EARLY ACCESSWEB SECURITY FOUNDATIONS PATHLIFETIME ACCESS

— THE LIBRARY — COURSE

Software Security Fundamentals

Self-paced video training — 7 modules, 49 lessons. Work through it at your own pace — every lesson is real practitioner training, not slide-reading.

7
MODULES
49
LESSONS
1080p
STREAMING
1st
LESSON FREE
▶FREE PREVIEW · ANDY CHOU INTERVIEW
FREE · NO ACCOUNT NEEDEDWATCH NOW →

CURRICULUM

7 modules, in order.

49 LESSONS · LIFETIME ACCESS
01Interviews3 LESSONS
▶Andy Chou interviewFREE
▶Gary McGraw Interview
▶Patric Godfroid interview
02Week 16 LESSONS
▶Memory Layout
▶Buffer Overflow
▶Code Injection
▶Other Memory Exploits
▶Format String Vulnerabilities
▶MVI 0037
03Week 27 LESSONS
▶1
▶Type Safety
▶Avoiding Exploitation
▶Return Oriented Programming
▶Control Flow Integrity
▶Secure Coding
▶Memory Safety
04Week 39 LESSONS
▶Security for the Web
▶Web Basics
▶SQL injection
▶SQL injection countermeasures
▶Web-based state using
▶session hijacking
▶cross site request
▶Web 2 0 (edited version)
▶cross-site scripting
05Week 49 LESSONS
▶Threat modeling (Architectural risk analysis)
▶Security Requirements
▶Design Flaws
▶Design category - Favor Simplicity
▶Design category - trust with reluctance
▶Design categories - defense in depth and monitoring-traceability
▶Top Design Flaws
▶Case study - VSFTPD
▶Designing and building secure software
06Week 512 LESSONS
▶Introducing Symbolic Execution
▶Flow Analysis
▶A Little History
▶Basic Symbolic Execution
▶Flow analysis- adding sensitivity (shortened)
▶Context Sensitive Analysis
▶Symbolic execution as search, and the rise of solvers
▶Flow Analysis- Scaling it up to a complete language and problem set (shortened)
▶Symbolic Execution Systems
▶Challenges and Variations
▶Static Analysis introduction (part 1)
▶Static Analysis introduction (part 2)
07Week 63 LESSONS
▶Penetration testing - introduction
▶Pen testing
▶Fuzzing (edited)

CURATED BY

CyberCoreSchool
PRACTITIONER-CURATED LIBRARY

Selected from working practitioners' training libraries and kept whole — modules, labs and walkthroughs exactly as taught.

GOOD TO KNOW

Lessons stream in the browser and remember where you stopped.

Watch on two devices at once — phone, tablet or desktop.

Download buttons are disabled; delivery uses expiring encrypted links.

$179 · ONE PAYMENT

Start with the free lesson.

The first lesson is open to everyone. Buy the course when you are sure — after that it is yours for life.