Software Development Security: CISSP Domain 8 Essentials
Learn to secure the software lifecycle and protect applications against common vulnerabilities with this foundational guide to secure development.
-
💬
AI instructor
Ask about any lesson and get a clear answer instantly, anytime. -
🕐
Start anytime
No schedules or deadlines — learn at your own pace, whenever suits you. -
🌐
In English
Lessons, tasks and certificate — all fully in your language.
About this course
Course contents
5 modules · 26 lessons · 2h 57m
1
Fundamentals of Secure Software Development
Understand the philosophy of security in development and the differences between various methodologies.
- Welcome to the World of Software Security
Defining the importance of building security into software from the start as a necessity rather than an option.7 min - The 'Shift Left' Philosophy
Explaining the Shift Left concept and the importance of integrating security into the early stages of development.6 min - Software Development Life Cycle (SDLC)
Explaining the core stages of the development life cycle from a security perspective.7 min - Security in the Waterfall Methodology
How to apply security controls in traditional linear projects.6 min - Security in the Agile Methodology
Challenges and opportunities of integrating security into fast and iterative development cycles.6 min - The Big Comparison: Agile vs. Waterfall
Analyzing the differences in security requirements between the two methodologies.7 min
2
Threat and Vulnerability Analysis
Identifying common technical risks across different types of software.
- Introduction to Software Vulnerabilities
Understanding what a software vulnerability is and how attackers exploit it.6 min - Buffer Overflow
A simplified technical explanation of how this vulnerability occurs and its associated risks.8 min - Cross-Site Scripting (XSS)
Understanding how malicious scripts are injected into web pages and methods for prevention.8 min - Risks in Traditional Architectures
Identifying threats specific to applications running on local devices or traditional servers.7 min - Risks in Web Applications
Analyzing the unique threats facing browser-based software.7 min
3
Data and Database Security
Securing the layer where sensitive information is stored and processed.
- Database Security Controls
Exploring data protection techniques within database management systems.7 min - Securing Data Storage Systems
How to protect files and data stored outside of traditional databases.6 min - SQL Injection Risks
Understanding the biggest threat to databases and how to prevent it.7 min - Input Validation
The importance of sanitizing user-provided data as a first line of defense.6 min - Application-Layer Encryption
Fundamentals of protecting data in transit and at rest within the software.6 min
4
Modern Environments and DevSecOps
Learning security practices in the era of cloud and automation.
- What is DevSecOps?
Integrating security as an integral part of automated development and operations.7 min - CI/CD Pipeline Security
How to protect the automated software build and deployment process.7 min - Cloud-Native Application Security
Understanding security challenges in containerized and cloud environments.7 min - API Security
Protecting the communication endpoints between different cloud applications.8 min - Identity and Access Management (IAM) in Applications
How to ensure that only authorized individuals access specific software functions.6 min
5
Security Controls and Testing
Learning how to inspect software and ensure its integrity before deployment.
- Static Application Security Testing (SAST)
Inspecting source code for vulnerabilities without executing the program.7 min - Dynamic Application Security Testing (DAST)
Testing the program while it is running to discover vulnerabilities in the operating environment.7 min - Software Configuration Management
Maintaining the integrity of software versions and tracking changes from a security perspective.6 min - Third-Party Library Security
How to manage the risks of using pre-built code from third parties.7 min - Final Review and CISSP Tips
A comprehensive summary of Domain 8 and how to prepare for exam questions.8 min
Secure Development Plan Design Project
You will create a blueprint for a hypothetical web application, identifying potential risks and necessary security controls at each stage of development.
What you'll get
-
📜
Certificate of completion
Add it to your LinkedIn profile -
💬
Personal AI tutor
Stuck on a lesson? Ask your built-in tutor anything, any time. -
🎧
Audio version included
Learn on the go — no screen needed -
♾️
Lifetime access
Come back anytime, no expiry -
📱
Phone or computer
Works anywhere, any device -
💸
14-day refund
No questions asked -
⚡
Short & focused
2h 57m of practical content
Certificate of completion
Every course you complete on PickAClass issues a credential like this — original, with its own code, verifiable by URL, and detailed about what was actually demonstrated.
Reviews
No reviews yet — be the first to share your experience.
Learners also took
Cybersecurity Foundations and Security+ SY0-701 Preparation
Cybersecurity Awareness and Identity Security Fundamentals
Cybersecurity Analyst: Modern Threat Defense and Response
Cybersecurity Awareness and Threat Defense for Employees
Frequently asked
What do I need to take this course? +
Just a phone or computer with internet. No installs, no special hardware.
How do I pay? +
By card via Stripe. We don’t store card details — Stripe handles them securely.
Can I get a refund? +
Yes — full refund within 14 days, no questions asked.
How long will I have access? +
Forever. Once you purchase, the course is yours to revisit anytime.
Will I get a certificate? +
Yes. On completion you'll receive a certificate you can add to your LinkedIn profile.
Get 10 courses a month
Members get 10 courses of their choice every month for $0. No per-course charges — you pay only the subscription.
- ✓ 10 courses every month
- ✓ Cancel anytime
Renews monthly. Unused courses expire at the end of each billing month.