OpenCourser brand icon
Sign in
We may earn an affiliate commission when you visit our partners.
Course image
Course image
Coursera logo

Principles of Secure Coding

4.4 Filled star Filled star Filled star Filled star Empty star
Based on 373 ratings
see reviews
Matthew Bishop, PhD

This course introduces you to the principles of secure programming. It begins by discussing the philosophy and principles of secure programming, and then presenting robust programming and the relationship between it and secure programming. We'll go through a detailed example of writing robust code and we'll see many common programming problems and show their connection to writing robust, secure programs in general. We’ll examine eight design principles that govern secure coding and how to apply them to your own work. We’ll discuss how poor design choices drive implementation in coding. We’ll differentiate between informal, formal, and ad hoc coding methods. Throughout, methods for improving the security and robustness of your programs will be emphasized and you will have an opportunity to practice these concepts through various lab activities. A knowledge of the C programming language is helpful, but not required to participate in the lab exercises.

Enroll now

Here's a deal for you

Save money when you learn with a deal that may be relevant to this course.
All coupon codes, vouchers, and discounts are applied automatically unless otherwise noted.
Valid until March 12, 2027
Save 40% Off 3 Months
Access thousands of top-rated learning programs with a Coursera Plus monthly subscription and take 40% off 3 months for a limited time.
Take
40%
off
Get offer

What's inside

Syllabus

Secure Programming Philosophy
In this module, you'll be able to describe key concepts in secure programming including typical problems and procedures. You'll be able to differentiate between robust programming and secure programming and you'll generalize from philosophies of "what to watch out for" and "where to look" to specific situations.
Read more

Traffic lights

Read about what's good
what should give you pause
and possible dealbreakers
Develops design principles governing secure programming and applies them to code, strengthening coding practices
Taught by Matthew Bishop, PhD, a leading expert in cybersecurity
Provides hands-on lab exercises to practice and reinforce concepts
Builds a strong foundation in secure programming principles, making it suitable for beginners and intermediate learners alike
Covers a comprehensive range of topics, from robust programming to secure design principles
Requires some knowledge of the C programming language for lab exercises

Save this course

Create your own learning path. Save this course to your list so you can find it easily later.
Save

Reviews summary

Principles of secure coding foundations

According to learners, the Principles of Secure Coding course offers a solid foundation in core secure programming principles, particularly praising its focus on design concepts and the insightful Saltzer & Schroeder principles module. Many found it a good starting point. However, students frequently note the course is more theoretical than practical, often lacking modern hands-on coding examples. A significant point is the requirement for prior C language knowledge for the labs, which some learners found misleadingly described and made labs difficult or impossible without this background, despite the description. While principles are valuable, be aware of the theoretical focus and C requirement.
Covers essential secure coding principles.
"Excellent overview of the core principles."
"Covers the foundational principles well."
"It really shifted my perspective on how to approach coding with security in mind from the design phase."
"A solid foundation for secure coding practices."
Focuses heavily on principles, less practical.
"felt a bit theoretical"
"stayed very high-level and philosophical"
"Disappointed with the lack of practical application."
"The course is more theoretical than practical..."
"...could use more modern language examples perhaps..."
C knowledge is needed for labs.
"...prior C knowledge makes them much easier."
"found the labs impossible without spending hours learning C first."
"Course description is misleading about C knowledge being 'helpful but not required' for labs."
"The C labs felt a bit dated."
"The labs are useful if you can get them to work - the environment setup wasn't straightforward for me."

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Principles of Secure Coding with these activities:
Attend Industry Events
Attending industry events can expose you to the latest secure programming trends and best practices.
Browse courses on Networking
Show steps
  • Research and identify relevant security conferences or meetups.
  • Attend the events and engage in discussions with experts and professionals.
Understand Secure Programming Principles
Reviewing the core principles of secure programming will help you write more secure and robust software in this course.
View The Art of Software Security Assessment on Amazon
Show steps
  • Read the book to understand the concepts behind secure programming.
  • Identify the key principles of secure programming.
  • Examine how these principles relate to software design and implementation.
Apply Secure Design Principles in Practice
Guided tutorials can help you apply secure design principles to your own coding projects.
Show steps
  • Find tutorials on secure coding best practices.
  • Follow the tutorials to learn how to implement secure design principles.
  • Apply the principles to your own code.
Five other activities
Expand to see all activities and additional details
Show all eight activities
Secure Password Storage System
Developing a password storage system will deepen your grasp of secure programming.
Browse courses on Data Security
Show steps
  • Design a secure password storage system.
  • Implement the system using a secure programming language and techniques.
  • Test the system to ensure its security.
Participate in a Coding Contest
Participating in coding contests can challenge your secure programming skills and expose you to different approaches.
Browse courses on Competitive Programming
Show steps
  • Find and register for a coding contest that focuses on secure programming.
  • Practice and prepare for the contest.
  • Participate in the contest and try to solve the problems.
Test Your Debugging Skills
Analyzing real-world code can help you identify and resolve potential security issues.
Browse courses on Debugging
Show steps
  • Find coding problems or challenges online.
  • Attempt to solve the problems or challenges.
  • Analyze the solutions to identify potential security issues.
Demonstrate a Robust and Secure Code
Build a project that demonstrates your understanding of robust and secure programming techniques.
Browse courses on Secure Programming
Show steps
  • Identify a secure development lifecycle (SDL).
  • Design and implement a software application using the chosen SDL.
  • Test and evaluate the application to ensure its robustness and security.
  • Document the project and its implications for secure software development.
Share Your Secure Programming Knowledge
Mentoring others in secure programming will reinforce your understanding of the subject and help others.
Browse courses on Secure Programming
Show steps
  • Identify opportunities to mentor others on secure programming.
  • Share your knowledge and experience to help mentees improve their secure programming skills.

Career center

Learners who complete Principles of Secure Coding will develop knowledge and skills that may be useful to these careers:
Application Security Engineer
As an Application Security Engineer, you will work in a trusted security role to make sure software applications are secure during design, development, deployment, and maintenance. The Principles of Secure Coding course can help you gain the skills needed to succeed in this role by ensuring that you are writing secure applications, right from the start.
See salaries and explore the career path for Application Security Engineer
Penetration Tester
Penetration Testers, also known as ethical hackers, use their skills to try to breach an organization's network to identify vulnerabilities that a malicious actor could exploit. This course will teach you about the design principles of secure coding, which can help you in your work as a Penetration Tester. The insight you gain on writing secure programs will give you the advantage of thinking like a person who would want to breach an organization's network.
See salaries and explore the career path for Penetration Tester
Cybersecurity Architect
Cybersecurity Architects design and implement security solutions for organizations. They work with stakeholders to understand the organization's security needs and develop and implement solutions to meet those needs. This course will give you the knowledge and skills you need to succeed as a Cybersecurity Architect, including understanding of the design principles of secure coding.
See salaries and explore the career path for Cybersecurity Architect
Security Analyst
Security Analysts monitor and analyze security data to identify threats and vulnerabilities. They also develop and implement security measures to protect an organization's information systems. This course will give you the knowledge and skills you need to succeed as a Security Analyst, including understanding of the design principles of secure coding.
See salaries and explore the career path for Security Analyst
Security Consultant
Security Consultants work with organizations to improve their security posture. They assess risks, identify vulnerabilities, and develop and implement security plans. They also provide training and awareness to employees on security best practices. This course will give you the knowledge and skills you need to succeed as a Security Consultant, including understanding the design principles of secure coding.
See salaries and explore the career path for Security Consultant
Malware Analyst
Malware Analysts investigate and analyze malware to understand how it works and how to protect against it. They also develop and implement countermeasures to protect systems from malware. This course will help you in this role by providing you with the skills to write robust and secure code. This will help you to understand how malware works and how to develop countermeasures to protect against it.
See salaries and explore the career path for Malware Analyst
Information Security Analyst
Information Security Analysts plan and carry out security measures to protect an organization's computer networks and systems. They also respond to security breaches and incidents and make sure the organization complies with security laws and regulations. The Principles of Secure Coding course will give you the hands-on experience writing robust and secure programs, which is a critical skill in this field.
See salaries and explore the career path for Information Security Analyst
Systems Administrator
Systems Administrators are responsible for the day-to-day operations of computer systems. They install, configure, and maintain hardware and software, and they monitor systems for security breaches and other problems. This course will help you in this role by providing you with the skills to write robust and secure code. This will help you to keep systems running smoothly and securely.
See salaries and explore the career path for Systems Administrator
Chief Information Security Officer (CISO)
CISOs are responsible for the overall security of an organization's information systems. They develop and implement security policies, procedures, and standards, and they oversee the organization's security program. This course will give you the knowledge and skills you need to succeed as a CISO, including understanding of the design principles of secure coding.
See salaries and explore the career path for Chief Information Security Officer (CISO)
Software Architect
Software Architects are responsible for the overall design and architecture of software applications. They work with stakeholders to define requirements, develop technical designs, and ensure that the software is built to meet the needs of the business. Taking the Principles of Secure Coding course will help you in this role by providing you with the skills to design and implement secure software applications.
See salaries and explore the career path for Software Architect
Network Engineer
Network Engineers design, implement, and maintain computer networks. They work with hardware and software to ensure that networks are secure and reliable. This course will help you in this role by providing you with the skills to write robust and secure code. This will help you to design and implement more secure networks.
See salaries and explore the career path for Network Engineer
Information Technology Auditor
Information Technology Auditors assess the security of computer systems and networks. They identify vulnerabilities and recommend ways to improve security. This course will help you in this role by providing you with the skills to write robust and secure code. This will help you to identify vulnerabilities and make recommendations for improvement.
See salaries and explore the career path for Information Technology Auditor
Software Developer
Software Developers design, develop, and test software applications. They work with stakeholders to understand requirements, develop code, and ensure that the software meets the needs of the business. This course will teach you the principles of secure coding, which will help you write more secure applications. This course can give you a competitive advantage by setting you up for success and longevity in the field.
See salaries and explore the career path for Software Developer
Security Engineer
Security Engineers typically conduct risk assessments to identify vulnerabilities in hardware and software systems, create and implement security policies, and test security controls for effectiveness. Furthermore, they are responsible for keeping up-to-date on the latest security trends and threats to take preventative measures. This course may help prepare you for a career in Security Engineering by giving you the foundational knowledge of writing secure code. It can also provide you with the skills needed to conduct risk assessments and create effective security policies and test controls.
See salaries and explore the career path for Security Engineer
Technical Writer
Technical Writers create documentation for software and hardware products. They work with engineers and other technical staff to understand the product and then write clear and concise documentation for users. If you are interested in a career as a Technical Writer, this course may be helpful as it will give you the opportunity to learn about the principles of secure coding. This knowledge will help you to write more accurate and informative documentation for software products.
See salaries and explore the career path for Technical Writer

Reading list

We've selected 13 books that we think will supplement your learning. Use these to develop background knowledge, enrich your coursework, and gain a deeper understanding of the topics covered in Principles of Secure Coding.
Cover image
The Art of Software Security Assessment
Save
Provides a comprehensive overview of the principles and practices of secure coding. It covers a wide range of topics, including software design, implementation, and testing. It valuable resource for anyone who wants to learn more about secure coding.
Art of Software Security Assessment, The:...
Kindle Edition
$$$
Cover image
Writing Secure Code for Windows Vista®
Save
Practical guide to writing secure code. It covers a wide range of topics, including secure coding techniques, threat modeling, and code review. It valuable resource for anyone who wants to learn how to write more secure code.
Writing Secure Code for Windows Vista (Pro - Step...
Paperback
$$
Cover image
Effective C
Save
Comprehensive guide to secure coding in C. It covers a wide range of topics, including secure coding techniques, threat modeling, and code review. It valuable resource for anyone who wants to learn how to write more secure code in C.
Effective C
Paperback
Check
Effective C
Kindle Edition
Check
Cover image
Practical JSF in Java EE 8
Save
Comprehensive guide to securing modern web applications. It covers a wide range of topics, including web application security threats, secure coding techniques, and web application security testing. It valuable resource for anyone who wants to learn more about web application security.
Practical JSF in Java EE 8: Web Applications ​in...
Kindle Edition
$$
Cover image
Web Application Security, A Beginner's Guide
Save
Hands-on guide to software security. It covers a wide range of topics, including secure coding techniques, threat modeling, and vulnerability analysis. It valuable resource for anyone who wants to learn more about software security.
Web Application Security, A Beginner's Guide
Paperback
$$
Web Application Security, A Beginner's Guide
Kindle Edition
$$
Cover image
The Web Application Hacker's Handbook
Save
Practical guide to web application hacking. It covers a wide range of topics, including web application security threats, vulnerability assessment, and penetration testing. It valuable resource for anyone who wants to learn more about web application hacking.
The Web Application Hacker's Handbook: Finding and...
Paperback
$$
The Web Application Hacker's Handbook: Discovering...
Paperback
$$$
The Web Application Hacker's Handbook: Finding and...
Kindle Edition
$$
Cover image
The CERT® C Coding Standard, Second Edition
Save
Comprehensive guide to secure coding in C and C++. It covers a wide range of topics, including secure coding techniques, threat modeling, and code review. It valuable resource for anyone who wants to learn how to write more secure code in C and C++.
The CERT® C Coding Standard, Second Edition
Paperback
Check
The CERT® C Coding Standard, Second Edition
Kindle Edition
Check
Cover image
Computer Security
Save
Comprehensive overview of computer security. It covers a wide range of topics, including computer security threats, security controls, and cryptography. It valuable resource for anyone who wants to learn more about computer security.
Computer Security
Paperback
Check
Computer Security
Kindle Edition
Check
Cover image
Cryptography and Network Security: Principles and...
Save
Comprehensive overview of network security. It covers a wide range of topics, including network security threats, security controls, and cryptography. It valuable resource for anyone who wants to learn more about network security.
Cryptography and Network Security: Principles and...
Paperback
$$$
Cover image
The Simpsons and Their Mathematical Secrets
Save
Popular science book about cryptography. It covers a wide range of topics, including the history of cryptography, different types of cryptography, and the future of cryptography. It valuable resource for anyone who wants to learn more about cryptography in a non-technical way.
The Simpsons and Their Mathematical Secrets
Paperback
$$
The Simpsons and Their Mathematical Secrets
Kindle Edition
$
Cover image
CUCKOO'S EGG
Save
Memoir by Clifford Stoll, a computer security expert who tracked down a Soviet spy in the 1980s. It fascinating read that provides a glimpse into the world of computer security and espionage.
CUCKOO'S EGG
Kindle Edition
$$
High-Tech Heretic: Reflections of a Computer...
Paperback
$$
Silicon Snake Oil: Second Thoughts on the...
Paperback
$$
(日本語) The Cuckoo's Egg: Tracking a Spy Through the Mazeof...
Tankobon Hardcover
$$
Cover image
The Disruptive Innovation Set (2 Books)
Save
Business book that discusses the challenges that large companies face in innovating. It valuable read for anyone who is interested in the future of technology and business.
The Disruptive Innovation Set (2 Books)
Paperback
$$
The Disruptive Innovation Set (2 Books)
Kindle Edition
$$
Lean Startup: How Today's Entrepreneurs Use...
Save
Business book that provides a framework for building successful startups. It valuable read for anyone who is interested in starting a business or learning more about entrepreneurship.
The Lean Startup: How Today's Entrepreneurs Use...
Hardcover
$$
The Lean Startup: How Today's Entrepreneurs Use...
Kindle Edition
$$

Share

Help others find this course page by sharing it with your friends and followers:
Facebook
LinkedIn
Reddit
X
Link
Email

Similar courses

Here are nine courses similar to Principles of Secure Coding.
Manage Your Versions with Git (Part I)
Most relevant
IntelliJ IDEA Case Study - Blood Donor Management System
Most relevant
Intro Robotics Developer Course - Using ROS in Python
Most relevant
AWS CodePipeline Beginner's Guide
Most relevant
Debugging support for the Node.js runtime in VScode
Most relevant
Object-Oriented Hierarchies in Java
Most relevant
How Software Ate Finance
Most relevant
Agile Project Management
Most relevant
Test Driven Development in Java for Beginners
Most relevant

Coursera Buyer Protection & Guarantee

Verified partner policies & purchase protections

Accredited University Partner
Free Trial & Audit

7-Day Free Trial & Free Audit

7-day free trial on monthly Coursera Plus subscriptions; free audit option available on most individual courses to explore video lectures and readings at no charge.

Return & Refund Policy

14-Day Refund Guarantee

14-day refund window on annual Coursera Plus subscriptions and single-course purchases prior to certificate issuance. Monthly subscriptions do not offer refunds once billed.

Buyer Protections

Verified Academic & Industry Partner

Accredited university and industry certifications (e.g. Stanford, Google, IBM, Yale), secure SSL payment processing, and verifiable digital certificate links.

Key Purchase Protections
14-day refund window on annual Coursera Plus and single courses
7-day free trial on monthly Coursera Plus subscriptions
Free course audit option for lectures and readings
Verified certificates from top universities & companies
OpenCourser Verified Partner Policy details last reviewed: 2026-10-22
Course image
Rating
4.4 Filled star Filled star Filled star Filled star Empty star
Effort
15 hours to complete
Level
Intermediate
Via
Coursera
Institution
University of California, Davis
Instructor
Matthew Bishop, PhD
Language
English
Transcripts
Español Français Português Deutsch Italiano 中文 العربية 한국어 日本語 हिंदी Nederlands Svenska Pусский Türkçe Polski Ελληνικά українська мова Bahasa Indonesia ไทย қазақша tiếng Việt
This course belongs to a collection called Secure Coding Practices. It's comprised of four courses:
  1. Principles of Secure Coding (viewing)
  2. Exploiting and Securing Vulnerabilities in Java Applications
  3. Identifying Security Vulnerabilities in C/C++Programming
  4. Identifying Security Vulnerabilities
Traffic lights
Read about what's good
what should give you pause
and possible dealbreakers
Develops design principles governing secure programming and applies them to code, strengthening coding practices
Taught by Matthew Bishop, PhD, a leading expert in cybersecurity
Provides hands-on lab exercises to practice and reinforce concepts
Builds a strong foundation in secure programming principles, making it suitable for beginners and intermediate learners alike
Covers a comprehensive range of topics, from robust programming to secure design principles
Requires some knowledge of the C programming language for lab exercises
Share this
Share to help others discover this course.
Facebook LinkedIn X Reddit Link Email
Begin learning today
Enroll now to gain full access to Principles of Secure Coding.
Enroll now
Save for later
Add this course to your list. Find it anytime.
Save
Our mission

OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.

Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.

Find this site helpful? Tell a friend about us.

Affiliate disclosure

We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.

Your purchases help us maintain our catalog and keep our servers humming without ads.

Thank you for supporting OpenCourser.

© 2016 - 2025 OpenCourser