SANS Software Security seeks to ingrain security into the minds of every developer in the world by providing world-class educational resources to design, develop, procure, deploy, and manage secure software.
We offer developers, architects, testers, managers, and security professionals an opportunity to learn, discuss, and share current developments in the field. We provide information on application security research, training, certification, and events.Secure Programming Tips
The majority of security vulnerabilities are found in the application layer. Our courses teach you how to develop defensible applications that are resistant to attack.Course Brochure
Our software security certifications provide assurance that an individual has practical knowledge and skills in secure coding (GSSP), web application security (GWEB), and web application penetration testing (GWAPT).
No posts available at this time. Please check back soon!
Nice summary of security talks at #JavaOne t.co/kf7he8HK
October 7, 2012 - 4:26 AM
New blog post: "SANS Appsec Survey" t.co/kC8QBofa
September 19, 2012 - 4:17 PM
New blog post: "Ask the Expert - Johannes Ullrich" t.co/HUP8J4Kc
August 14, 2012 - 4:50 PM
Auditing ASP.NET applications for PCI DSS compliance
By Christian Moldes
Securing Blackboard Learn on Linux
By David Lyon
Mass SQL Injection for Malware Distribution
By Larry Wichman
View More »
"Great course. Very valuable information that I can apply to my job immediately. Thank you!"
- Jeffrey Flagg, Command Information
"The course filled in several gaps and helped me regain a focus on relevant security issues and strategies."
- Steve McIlwain, AppRiver
"Great overview of different types of attacks and how to mitigate them."
- Tim Sargent, Kinecta Federal Credit Union