Secure coding principles; vulnerabilities and exploits: buffer overflow, SQL injection, cross-site-scripting, session hijacking, sensitive data exposure; countermeasures; advanced testing and program analysis techniques.