Presented by security ace David R. Miller, this course covers what you will need to know to pass the CISSP Domain 8 - Software Development Security exam. Domain 8 focuses on the challenges of securing software applications from malicious attack. The course starts with a look at the various types of applications and identifies the risks within their architecture.

It goes on to examine the software development life cycle, offering several highly recommended models for enhancing security during the phases of the life cycle and within the applications themselves. Specific risks, countermeasures, and controls are covered along with a description of the testing strategies used to ensure more secure applications.

• Learn what is required to pass Domain 8 of the 2015 CISSP Certification Course
• Understand the security risks inherent within the architecture of the different forms of applications
• Review the security dangers associated with the different SDLC methodologies
• Explore buffer overflow and injection risks, and how to protect against them
• Master the controls used to secure the computing environment and the SDLC
• Gain insight regarding the testing strategies used to secure software applications

David R. Miller (CISSP, PCI QSA, CEH) is President of the MicroLink Corporation, a provider of information systems security, compliance, and training services. He has lectured on information security to many audiences, including those at the U.S. Military Academy at West Point, the U.S. Army Advanced Battle Command, Cisco Systems Inc., Oracle Corporation, and Symantec Corporation. He is the author (or co-author) of numerous books on network systems and information security, and many training videos for O'Reilly.