RAISE AWARENESS OF APPLICATION SECURITY

Application Security Training Curriculum

Arguably the strongest strategy to raise awareness and disseminate core messages about application security is through training. Infrared Security is building an application security training curriculum targeting developers, project managers, and security testers. A developer will walk away from our courses with a strong understanding of core application security risk along with the patterns and practices needed to mitigate those risks within targeted development languages and frameworks. Infrared Security currently has the following courses available and is actively building and customizing new courses based on customer demand:

PROVIDE DEVELOPERS PRESCRIPTIVE GUIDANCE

Technology Specific Secure Coding Guidelines

Infrared Security has yet to met a developer who wants to write insecure code. Unfortunately, most developers do not have the programmatic guidance to write secure code within their development environment. Secure coding guidelines are a strong means of solidifying the expected secure programming patterns and practices at an organization and or application level. Infrared Security will interview your development team(s) to identify the core development technologies and existing strategies to mitigate key security risks. Based on those artifacts, Infrared Security will develop a tailored secure coding guideline for your organization. Such a guideline will identify key application security risks and define the preferred strategy for mitigating those risks at the code level. Infrared Security currently has the following generalized secure coding guidelines available:

FIND AND FIX VULNERABILITIES

APPLICATION ASSESSMENTS

Infrared Security is an organization focused on enabling developers to produce more secure code. Our experience provides us the capabilities to not only identify the key risks and corresponding security controls within the application, but also provide developer centric design, implementation, and integration support! Infrared Security offers the following assessment, remediation, and verification services: