Software Security Institute
Software Security Institute

SANS Secure Coding, Application Security & Information Security Training

The SANS Software Security Institute (SSI) provides intensive, immersion training designed to help you and your staff master the practical steps necessary for defending applications, systems and networks against the most dangerous threats - the ones being actively exploited. The courses are full of important and immediately useful techniques that you can put to work as soon as you return to your offices. They were developed through a consensus process involving hundreds of developers, architects, administrators, security managers, and information security professionals, and address secure coding principles, security fundamentals and awareness, and the in-depth technical aspects of the most crucial areas of application security, secure coding and IT security.

SSI training can be taken in a classroom setting from SANS-certified instructors, self-paced over the Internet, or in mentored settings in cities around the world.

Programs of the SANS Software Security Institute:

Training Calendar
(Application and Secure Coding training at National and International Locations)
Application/Software Security, Secure Coding Courses
(Application and Secure Coding Course Descriptions)
The GIAC Secure Software Programmer (GSSP) Certification
(technical certification for the people you trust to develop and manage your applications)
SSI Application Security and Secure Coding Research Library
(original research papers for secure coding and application security)
SANS/FBI Annual Top 20 Internet Security Vulnerabilities List
(a consensus list of vulnerabilities that require immediate re-mediation)

Mission Statement

The SANS Institute was established in 1989 as a cooperative research and education organization.

Today, SANS teaches more than 14,000 application and network security practitioners each year. With more than 70,000 alumni and 165,000 community practitioners receiving SANS research and project information, SANS is the most trusted and by far the largest source for information security training and certification in the world.

The SANS Software Security Institute (SSI) focuses the deep resources of SANS on the growing threats to the application layer. SSI provides training, certification and a library of research and community initiatives to help developers, architects, programmers, and application security managers protect their software/web applications.

SSI programs are designed to teach and enable implementation of the most effective secure coding and software development lifecycle (SDL) practices.