Secure Coding in Go

56mIntermediate2021-11-30

Authors

Miki Tebeka

CEO at 353Solutions

Course details

The Go programming language is growing in popularity. Unfortunately, security issues for Go applications are also on the rise. In this course, learn how to secure your Go application to prevent hackers from stealing data or crashing it. Instructor Miki Tebeka explains why developers should care about security, as well as how to prevent SQL injection attacks, identify places where sensitive data is stored and avoid exposing it to the outside world, write code that protects the integrity of the system, and more. Along the way, he provides challenges that allow you to put your new skills to the test.

Skills covered

GoSoftware Development SecurityGoogleCybersecurityProgramming LanguagesSoftware DevelopmentOne-Off

Concepts

0. Introduction

01 - Why care about security
02 - What you should know

1. Security Overview

03 - Security risks overview
04 - CVEs
05 - OWASP Top 10
06 - Case studies

2. Input

07 - Overview of input processing
08 - SQL injection
09 - Setting timeouts
10 - Size limiting
11 - Input validation
12 - Challenge - Secure input
13 - Solution - Secure input

3. Output

14 - Overview of output issues
15 - Cross-site scripting (XSS)
16 - Sensitive data
17 - Terminating HTTP handlers on error
18 - Challenge - Securing output
19 - Solution - Securing output

4. Authentication and Authorization

20 - Overview of authentication issues
21 - Authentication
22 - Authorization
23 - Challenge - Limit access
24 - Solution - Limit access

5. Infrastructure

25 - Overview of infrastructure security
26 - Security configuration
27 - Keeping secrets
28 - Dependency management
29 - Logging and metrics
30 - Challenge - Secure project
31 - Solution - Secure project

6. Process

32 - Include security in your process
33 - The security mindset
34 - Linters
35 - Security audits

Conclusion

36 - Next steps