1 2 • Code development practice • Mitigates basic vulnerabilities • XSS • SQL Injection • Made by security experts, for non-security experts • Mainly developers • In practice, commonly used as the only measure of security in the development cycle Secure Coding 3 • There are “Secure Coding” courses • A lot of courses • Developers usually choose the same course as their peers • Resulting in the same