Workshop Presentation — SSDLC with Hands-On Coding
This is the full slide deck used throughout the workshop — 19 slides covering the complete arc: why security cannot wait, the six phases of the Secure Software Development Lifecycle, live vulnerable-vs-secure code comparisons (SQL injection, XSS, buffer overflows, CSRF), the three hands-on labs, and DevSecOps integration.
📽 Use this deck to follow along during the workshop, or to review the material afterwards.
What the Deck Covers
- Slides 1–3: Why security cannot wait, and the workshop agenda.
- Slides 4–7: From SDLC to SSDLC; the CIA Triad, Least Privilege, and Defense in Depth; the MOVEit and T-Mobile case studies.
- Slides 8–14: The six lifecycle phases with live code — security requirements, threat modeling, SQL injection and XSS fixes, SAST/DAST/IAST, hardened deployment, and continuous maintenance.
- Slides 15–17: The three hands-on labs — threat modeling, the secure coding challenge, and the security testing lab.
- Slides 18–19: DevSecOps pipeline design and key takeaways.