BSidesTLV 2024 - Hacking Secure Coding into Highschool Education

Описание: Speakers: Or Sahar & Yariv Tal

In this talk, we’ll introduce the “Secure From Scratch” approach to secure coding. We’ll discuss PREVENT - an acronym and methodology that encompasses secure coding principles for developers who may not have heard of or learned enough from OWASP’s top 10. We’ll also share our experience in reaching high school students and providing them with a secure coding workshop. In the workshop, they learned the importance of secure coding by putting PREVENT into practice in a lab. They found it interesting and exciting. We’ll outline how we structure our workshops so that anyone can replicate them and provide real benefits to developers, without overwhelming them with buzzwords, vulnerabilities, or exploits that they neither want nor have time to deal with.