Secure Software Development Training 10

1
SECURIUM FOX offers cyber security consultancy
services with its expert and experienced team. We
are providing consulting services to prevent
cyber attacks, data leak and to ensure that our
customers are ready and safe against cyber
attacks, with more than 15 years of
experience.In addition to pentests and
consulting services, SECURIUM FOX prepares its
customers and field enthusiasts for real life
scenarios by providing trainings in the lab
environment which was prepared by themselves,
with its young, dynamic and constantly following
team.Everytime that hackers are in our lives,
there are always risks that we can face with a
cyber attack. Over the years cyber security has
become a critical precaution for all
organizations and companies after the effects and
number of attacks. SECURIUM FOX tests the weak
points of customers for possible attacks and
provides consulting services to eliminate these
weak points.SECURIUM FOX team also offers
support for the development of our country in
this field by supporting free events being
organized as a volunteer by the Octosec team.
ABOUT US
2

• SECURE SOFTWARE DEVELOPMENT TRAINING

3
Secure Development Life Cycle

• SIX PRACTICES FOR IMPROVING PRODUCT SECURITY
• Secure Development Life Cycle (SDL) is a process
  for developing products that are secure and
  resilient. Junipers SDL program is made up of
  six core practices.

4
Secure Coding Training

• Secure Coding training is the first step in
  implementing the Secure Development Life Cycle.
  All software developers at Juniper are required
  to take this training, which is foundational for
  building more resilient software. Training is
  provided in multiple coding languages, with
  developers taking the appropriate course.
• Secure Coding training covers fundamental
  concepts related to secure coding, secure design,
  secure testing, and privacy.
• Juniper believes that everyone involved in
  software development is responsible for the
  security of software products. This includes
  managers, program managers, testers, and IT
  personnel. With this in mind, secure development
  lifecycle training is available to all employees
  24 hours a day, 7 days a week, and it offers a
  range of additional training covering secure
  coding fundamentals.

5
Security Considerations in Design

• SDL Practice 2 defines the security-related steps
  that Juniper engineers and product managers must
  undertake in the planning phase of product
  development. During this phase, engineers and
  product managers are required to formally address
  security risks in

6
Threat Modeling

• Threat modeling evaluates potential threats to a
  product. Threat modeling determines risks from
  those threats and sets the boundaries for a range
  of appropriate mitigations.
• Threat models help developers define product
  attack surfaces, meaning the breadth and depth of
  exposure to compromise. For example, a weak
  password can be exploited by a brute force
  attack, or the use of a predictable TCP/IP
  ephemeral port may allow an attacker to mount a
  TCP reset attack.
• Threat modeling builds a framework for deeper
  security evaluation by identifying and
  enumerating issues.

7
Penetration Testing

• Once a products security posture has been
  defined, Junipers SDL calls for the evaluation
  and validation of the security risks through
  penetration testing. Penetration testing is a
  security evaluation methodology in which ethical
  hackers mimic real-world attacks to identify
  methods for circumventing the security features
  of an application, system, or network. It
  involves launching real attacks on test systems,
  using tools and techniques commonly used by
  adversaries.
• Penetration testing makes use of the threat model
  to devise a penetration test plan based on
  enumerated attack surfaces and threats.

8
Incident Response Plan

• Products released with no known vulnerabilities
  can become subject to threats over time. The
  incident response plan outlines how Juniper
  responds to potential product vulnerabilities and
  how these threats and mitigations are
  communicated to customers.
• This practice builds on Junipers
  industry-respected Juniper Networks Security
  Incident Response Team (Juniper SIRT) framework
  for responding to security issues. In responding
  to security incidents, the plan relies on
  existing SIRT tools, best practices, processes,
  and relationships.

9
Release Security Review

• The release security review is the examination of
  a products security posture prior to its release
  with the goal of identifying and evaluating
  remaining security risks and the findings from
  all parts of the SDL. The result should be a big
  picture of the security posture of not just the
  software release, but the people, systems, and
  processes that produced it and have to support it
  over its lifecycle.

10
You can always contact with SECURIUM FOX. You can
contact us through our email addresses or by
using the contact form on the side.

• INFO
• 3rd Floor,Lohia Towers,
• Nirmala Convent Rd,
• Gurunanak Nagar,Patamata,Vijyawada,
• Andhra Pradesh -520010
• 9652038194
• 08666678997
• info_at_securiumfoxtechnologies.com

11

• info_at_securiumfoxtechnologies.com
• Andhra Pradesh Office
• 91 8666678997,91 91652038194
• 3rd Floor,Lohia Towers,
• Nirmala Convent Rd,Gurunanak Nagar,Patamata,Vijaya
  wada,
• info_at_securiumfoxtechnologies.com
• UK Office
• 44 2030263164
• Velevate, Kemp House, 152 - 160,City Road,EC1V
  2NX
• London
• info_at_securiumfoxtechnologies.com
• Tamil Nadu Office
• 91 9566884661
• Kailash Nagar, Nagar, Tiruchirappalli, Tamil Nadu
  620019
• info_at_securiumfoxtechnologies.com

• Noida Office
• 91 (120) 4291672, 91 9319918771
• A-25, Block A,
• Second Floor,Sector - 3,
• Noida, India
• info_at_securiumfoxtechnologies.com
• USA Office
• 1 [phone]
• 33 West,17th Street,
• New York,
• NY-10011, USA
• info_at_securiumfoxtechnologies.com
• Dubai Office
• 971 545391952
• Al Ansari Exchange, Ansar Gallery - Karama
  Branch, Hamsah-A Building - 3 A St - Dubai -
  United Arab Emirates