Günümüz bilişim güvenliğinin en önemli problemlerinden biri güvenlik bilinci olmadan geliştirilen yazılımlardır. Yazılım güvenliği sağlanmadan bilişim güvenliğinden söz edilemez. Yazılım geliştiriciler genel itibariyle hız ve daha fazla özellik konusuna yoğunlaşmaları nedeniyle güvenlik konusu pek önemsenmemektedir. Eğitimi daha güvenli ve kontrol edilebilir yazılım geliştirmek için gereken mantığı ve pratik bilgiyi aktarma amaçlı olarak yazılım geliştiricilere ve güvenlik denetimi yapan uzmanlara yönelik hazırlanmıştır. Eğitim Java ve .Net platformuna özel hazırlanmış kod örnekleriyle uygulamalı olarak gerçekleştirilmektedir. Eğitime katılmak için ön şart temel programlama bilgisine sahip olmaktır.

Neler Öğreneceksiniz

Background
Güvenli Girdi Kontrolü
Güvenli Kimlik Doğrulama
Güvenli Session Yönetimi
Güvenli Yetkilendirme
Güvenli Dizayn
Güvenli Kod Analizi
Güvenli Web Servisleri ve AJAX

Kimler Katılmalı

Bu eğitim, kurumsal ortamlarda çalışan yazılım geliştiriciler ve yazılım güvenliği konusunda çalışmalar yapan herkes için önemli ölçüde yarar sağlayacaktır.

We can organize this training at your preferred date and location. Contact Us!

Prerequisites

There are no prerequisites for this course.

Training Outline

Güvenli Kodlamanın Temelleri

Yazılım Güvenliği Temelleri
Temel Güvenlik Kavramları
Java SE Güvenliği

Güvenli Girdi Yönetimi

Buffer Overflow
Cross Site Scripting (XSS)
XSS Önleme Teknikleri
SQL, XML, LDAP Injection
SQL, XML, LDAP Injection Önleme Teknikleri
Arbitrary File Uploads
Güvenli Yükleme (Upload) Yöntemleri
Image dosyalarını güvenli yükleme
Cananicalization, Normalization teknikleri
Regular Expressions
Beyaz Liste vs Kara Liste

Güvenli Çıktı Yönetimi

Anti XSS Output Encodings

Hassas Parametrelerin Güvenliği

Güvenli Kimlik Doğrulama

Kimlik Doğrulama Çeşitleri
Basic, Digest, Windows Authentication
Form Authentication
Güvenli Kimlik Doğrulama Yöntemleri
Multi-factor Authentication
Kaba Kuvvet Önleme Algoritmaları

Güvenli Oturum Kontrolü

Oturum Saldırıları ve Önlemleri
Cross Site Request Forgery
CSRF Prevention CheatSheet
Session Korsanlığı (Hijacking)
HttpOnly - Java Servlet Filters

Güvenli Kod Analizi

Statik/Dinamik Kod Analizi
Kod Analiz Araçları

Why Choose Us

Experience Secure Software Development through Bilginç IT Academy's live and interactive virtual classroom environment, accessible from your home, office, or any location. Connect with expert trainers in real time and bring the energy of classroom learning into the digital experience.

Live Instructor-Led Sessions: Join scheduled training sessions with your instructor and fellow delegates in real time.
Interactive Learning Experience: Take part in discussions, practical exercises, group activities, and Q&A sessions throughout the course.
Expert Trainer Network: Learn from experienced trainers with strong industry backgrounds and practical field expertise.
Over 30 Years of Training Expertise: Benefit from Bilginç IT Academy's long-standing experience in delivering professional training since 1995.
Flexible and Scalable Delivery: Access live virtual classrooms worldwide with flexible planning options for individual and corporate training needs.

Experience Secure Software Development in a focused classroom environment designed for high engagement and effective learning. Bilginç IT Academy's carefully selected training venues provide a professional setting where delegates can interact directly with expert trainers and peers.

Experienced Trainers: Learn from specialists with extensive field experience and real-world knowledge.
Professional Training Venues: Attend courses in comfortable, well-equipped classrooms designed to support effective learning.
Focused Classroom Experience: Benefit from limited class sizes that encourage discussion, interaction, and personalized support.
Quality-Driven Learning: Develop practical skills through structured, up-to-date, and professionally designed training content.

Meet your team's training needs with Bilginç IT Academy's onsite Secure Software Development solution, delivered at your office or preferred location. Align your team's development with your business goals through a training experience tailored to your organization.

Tailored Course Content: Adapt the training program to your organization's projects, team structure, and specific business requirements.
Time and Cost Efficiency: Reduce travel, accommodation, and operational costs while maximizing the value of your training investment.
Team-Focused Learning: Help your employees develop around the same knowledge base and strengthen collaboration across your organization.
Simplified Planning and Tracking: Manage the training process, participant development, and organizational requirements with greater control.

A. A. - Baş Danışnan/Müdür / ICBC Turkey

Training is very rarely offered at our company, and this was the most successful training I've received in a long time. Both the subject matter and the instructor were excellent. We completed the training without getting bored at all.

O. D. - yazılımcı / Türk Eximbank

Kudos to our instructor!

Y. K. - Software Engineer / Tofaş Türk Otomobil Fabrikası

It was a very useful training session.

U. F. - Eğitim Teknolojileri ve Dijital Uygulamalar Yöneticisi / MNG KARGO YURTICI VE YURTDISI TASIMACILIK A.S.

Our teacher was very successful, thank you.

Ü. Ö. - Yazılım / MNG KARGO YURTICI VE YURTDISI TASIMACILIK A.S.

The training was helpful, thank you.

B. K. - Bilgi Güvenliği Uzmanı / MNG KARGO YURTICI VE YURTDISI TASIMACILIK A.S.

The training was extremely successful. Together with our instructor, we covered almost all aspects of security. I believe it created a very good awareness regarding security.

S. B. - Veritabanı Güvenlik Yöneticisi / MNG KARGO YURTICI VE YURTDISI TASIMACILIK A.S.

Thanks.

M. Ö. - Yazılım Uzmanı / TGS YER HİZMETLERİ AŞ

The training was very enjoyable.

B. B. - IT App Team / MUFG Turkey A.Ş.

Our instructor was absolutely excellent; their explanations, their mastery of the subject, and their ability to keep our attention throughout were all outstanding. Thank you to them.

B. K. - VP / BANK OF TOKYO MITSUBISHI UFJ TURKEY A.Ş.

Thanks

M. A. G. - Yazılım Uzman Yardımcısı / FLO MAĞAZACILIK

It was a very enjoyable training session. Thank you to everyone involved.

G. B. - Yazılım Geliştirme Müdürü / SOMPO JAPAN GENEL SİGORTA

Many thanks to my teacher. If the training lasted 15 days, we would have enough material to learn in 15 days. Thanks also to Bilginç Academy.

M. T. - SOFTWARE ASSISTANT SPECIALIST / Yıldırım Holding

It was a great training. The training content was very comprehensive.

O. B. - Senior Consultant / MDSAP TR YAZILIM ÜRÜNLERI VE BILIŞIM HIZMETLERI TIC. LTD. ŞTI.

I would like to thank our instructor for sharing their knowledge and experience with us, without omitting any details.

F. G. - Yazılım Geliştirme Müdürü / Pronet Güvenlik & Alarm Sistemleri

He was a highly communicative instructor. The examples he gave helped us understand better. Thank you for sharing your knowledge and experience.

S. Ş. - Web Yazılım Geliştirme Takım Lideri / Pronet Güvenlik & Alarm Sistemleri

It was a very nice and enjoyable training, we had many opportunities to ask questions about the training topics, it was a useful training, thank you.

B. M. - Yazılım Geliştirme Uzmanı / Pronet Güvenlik & Alarm Sistemleri

The instructor is knowledgeable about the subject. It was a very effective training session.

S. Ş. - Yazılım Geliştirme Takım Lideri / Pronet Güvenlik & Alarm Sistemleri

We were very pleased, thank you very much.

F. G. - Yazılım Geliştirme Müdürü / Pronet Güvenlik & Alarm Sistemleri

The educator was a truly valuable person. Their teaching style and guiding vision earned them the admiration of everyone. Thank you very much.

E. Y. - Yazılım Uzman Yardımcısı / Metropal Kurumsal Hizmetler A.Ş

The training provided was quite adequate, and the instructor's sincerity in explaining things was truly wonderful.

Ö. E. - Full Stack Mobile Developer / Metropal Kurumsal Hizmetler A.Ş

I was very pleased with the training; I believe that even on topics I already knew, these small tips and tricks will help me improve.

E. A. - Yazılım Geliştirici / Vakıf Katılım Bankası

Overall, it was a good training session; it helped us identify our shortcomings.

B. C. - Backend Developer / Vakıf Katılım Bankası

Everything was as it should be, thank you.

B. M. - Yazılım Geliştirme Uzmanı / Pronet Güvenlik & Alarm Sistemleri

Everything went very well. We are eagerly awaiting the new training sessions.

F. G. - Yazılım Geliştirme Müdürü / Pronet Güvenlik & Alarm Sistemleri

Thanks

Why have you chosen us?

I have attended a training from Bilginc IT Academy before and I was satisfied.

I have attended a training from a different provider and it was not helpful.

Other

How many employees do you have in your IT department?

0 – 50

50 – 250

250 – 1000

1000+

Secure Software Development Training

Neler Öğreneceksiniz

Kimler Katılmalı

Prerequisites

Training Outline

Why Choose Us