Python Security Training (Desktop) Overview
This Desktop Application Security in Python course teaches developers basic and advanced skills for building secure desktop applications using Python. Participants learn how to identify and mitigate threats, implement secure coding practices, and leverage cryptography to safeguard sensitive data. By the end of the course, learners can create robust and secure desktop applications that protect against cyberattacks.
Location and Pricing
Accelebrate offers instructor-led enterprise training for groups of 3 or more online or at your site. Most Accelebrate classes can be flexibly scheduled for your group, including delivery in half-day segments across a week or set of weeks. To receive a customized proposal and price quote for private corporate training on-site or online, please contact us.
In addition, some courses are available as live, instructor-led training from one of our partners.
Objectives
- Understand fundamental cyber security concepts and threats
- Apply input validation techniques to mitigate injection attacks
- Identify and prevent integer handling vulnerabilities
- Securely handle files and streams to avoid path traversal attacks
- Implement robust authentication and password management strategies
- Utilize cryptography to protect data confidentiality and integrity
- Recognize and address common software security weaknesses related to time, state, and errors
Prerequisites
All Python Security training students must have general Python development experience.
Outline
Expand All | Collapse All
Introduction to Cyber Security
- What is security?
- Threat and risk
- Cyber security threat types – the CIA triad
- Cyber security threat types – the STRIDE model
- Consequences of insecure software
Input Validation
- Input validation principles
- Denylists and allowlists
- What to validate – the attack surface
- Where to validate – defense in depth
- When to validate – validation vs transformations
- Validation with regex
- Regular expression denial of service (ReDoS)
- Dealing with ReDoS
Injection
- Injection principles
- Injection attacks
- SQL injection
- Code injection
Integer Handling Problems
- Representing signed numbers
- Integer visualization
- Integers in Python
- Integer overflow
- Integer overflows in ctypes and numpy
Files and Streams
- Path traversal
- Additional challenges in Windows
- Path traversal best practices
Security Features
- Authentication
- Password management
- Information exposure
Using Vulnerable Components
- Assessing the environment
- Hardening
- Malicious packages in Python
- Vulnerability management
Cryptography for Developers
- Cryptography basics
- Cryptography in Python
- Elementary algorithms
- Confidentiality protection
- Integrity protection
- Public Key Infrastructure (PKI)
Errors
- Error and exception handling principles
- Exception handling
Wrap Up
- Secure coding principles
- And now what?
Conclusion
Training Materials
All attendees receive comprehensive courseware.
Software Requirements
Attendees will not need to install any software on their computers for this class. The class will be conducted in a remote environment that Accelebrate will provide; students will only need a local computer with a web browser and a stable Internet connection. Any recent version of Microsoft Edge, Mozilla Firefox, or Google Chrome will work well.
