If you’re a programmer and you’ve heard it once, you’ve heard it a thousand times. “Build security into your programs!” That’s easy to say, but how, exactly, do you do that? The Linux Foundation‘s Open Source Security Foundation (OpenSSF) has an answer: A set of three free classes and a certification program to get your security skills up to speed.
Also: Best online learning platforms in 2020
Specifically, they dig into common risks and requirements, design principles, and evaluating code (such as packages) for reuse. They also focus on key implementation issues, including input validation, processing data securely, calling out to other programs, sending output, cryptography, error handling, and incident response. This is followed by a discussion on various kinds of verification issues, including security testing and penetration testing, and security tools. The classes conclude with a discussion on deployment and handling vulnerability reports.
ZDNet Recommends
Best Linux Foundation classes in 2020: Intro to Linux, Cloud Engineer Bootcamp, and more
Want a good tech job? Then you need to know Linux and open-source software. One of the best ways to pick them up is via a Linux Foundation course.
Mike Dolan, The Linux Foundation’s Senior VP and GM of Projects, said: “We’re excited to offer the Secure Software Development Fundamentals professional certificate program to support an informed talent pool about open source security best practices.” You should be excited, too. As the recent 2020 Open Source Jobs Report showed, demand is higher than ever for open-source and Linux savvy employees and 52% of hiring managers are more likely to hire you if you have appropriate certification.
One final note, the OpenSSF is incorporating the Core Infrastructure Initiative (CII) projects. CII has been working on securing older, popular open-source programs, which were not receiving enough funding. These programs include the CII Census, a quantitative analysis to identify critical OSS projects; CII Best Practices badge project; and the CII FOSS Contributor Survey, a quantitative survey of OSS developers. Both will become part of the OpenSSF Securing Critical Projects working group. These efforts will continue to be implemented by the Laboratory for Innovation Science at Harvard (LISH).
Related Stories:
- Uniting for better open-source security: The Open Source Security Foundation
- Out-of-date, insecure open-source software is everywhere
- Vulnerabilities in popular open-source projects doubled in 2019
Article source: https://www.zdnet.com/article/open-source-security-foundation-launches-a-new-certification-program-on-edx/#ftag=RSSbaffb68