Secure Code Warrior NTC Hack Event

Secure Code Warrior HackDays(SCWH): To further enhance our skills, we’ve managed to secure licenses for a platform called Secure Code Warrior (SCW) which is a gamified approach to improving your secure coding skills. It’s a suite of hands-on, interactive learning scenarios that enable developers to master secure coding techniques in different development languages and frameworks. It goes beyond the classic multiple choice techniques and offers hands-on challenges where software design and code needs to be analysed for security weaknesses. Once identified, you need to modify the code to remediate or mitigate the weaknesses. SCW supports different languages and technologies C# (.NET, WebForms, MVC), Java (Spring, Struts, JEE), Ruby (on Rails), Python (Django), Node.JS, Scala (Play) etc.

Topic of the Month: Open source code is becoming an integral part of modern IT industry. We must manage unique risks and rewards of this software development model by establishing a robust security strategy.

Gaurav Gaur, Developer @HMRC-DDCN, is going to talk about "What it takes to be Open Source?". He will talk about:

• Security measures and steps HMRC takes before going open source

• Case study about couple of security incidents @HMRC

Hackathon: We will conclude the session by introducing a new of set code security challenges. The competition will be open for 3 days and there are some prizes to be won.

Pre-requisites:

• SCW account (if you don’t have one, please contact Ryan Allan)

• Laptop to participate in hackathon

• Any suggestions for future sessions