Secure Software Application

Cyber Security · Level 6  ·  6 Chapters

Compiled by: Wesley Rotich

Can I download Secure Software Application notes as a PDF?

Yes. 2 CDACC past papers for Secure Software Application download as a PDF, free, with no account and no payment. The notes download as a PDF too: every chapter has a Download PDF button above its notes. Sign in and click it. Each download comes from your plan's monthly allowance or from credits. To read before you sign in, the first topic of every chapter opens to anyone, and a Profplanet plan opens the remaining topics. See the 2 free past papers for this unit.

▣

What Secure Software Application covers

In this unit, you will be able to confidently assess and secure a wide range of software applications by understanding their functions, workflows, and security needs. You will learn to identify vulnerabilities through hands-on testing methods like static and dynamic analysis, as well as penetration testing, and prioritize risks to protect critical data and business operations. By the end, you’ll be equipped to plan and execute thorough security assessments that keep software safe and reliable in real-world environments.

■

Careers after Secure Software Application

In Kenya’s fast-growing digital economy, every piece of software - from mobile money apps to county health portals - needs strong security. The abilities you develop in this unit open doors to roles where you protect data, keep services running, and help organisations meet legal and industry standards. Below are real-world places where your new skills can be applied and how you can earn from them.

  • Banking and micro-finance IT departments in Nairobi or Mombasa - you review the institution’s security policies, map out critical banking applications, run SAST and DAST on core banking systems, and produce vulnerability reports that guide remediation, earning a salary as a secure-software analyst or consultant.
  • Mobile network operators’ app development teams in Kiambu - you identify security needs for mobile money and USSD services, test third-party APIs and libraries, and implement strong authentication mechanisms, receiving regular pay as a security engineer or freelance penetration tester.
  • County e-government portals (e.g., land registration, tax filing) in Nakuru or Kisumu - you assess web-based public services, document existing controls, prioritize fixes based on citizen data sensitivity, and generate compliance reports that help the county meet data-protection regulations, earning a contract or permanent civil-service position.
  • Health information system providers serving referral hospitals in Eldoret - you analyze patient-record applications, run dynamic testing during runtime, and adjust configuration settings to meet health-data privacy standards, earning income as a specialist security consultant for the health sector.
  • Agri-tech startups building farm-management platforms in Machakos - you evaluate desktop and cloud components, test integrations with satellite-data APIs, and apply secure coding practices to prevent SQL injection and XSS, receiving equity-based compensation or project-based fees.
  • Tourism and hotel reservation platforms on the Kenyan coast - you conduct penetration testing on booking engines, verify session-management security, and produce detailed vulnerability reports for the platform owners, earning a freelance or agency-based security testing contract.
  • Logistics and supply-chain software firms in Nairobi’s industrial parks - you prioritize software based on shipment data criticality, use vulnerability scanners to spot weaknesses in APIs linking warehouses, and advise on remediation, earning a salary as a senior application security specialist.
  • Independent cybersecurity consulting practice serving SMEs across Kenya - you offer end-to-end security assessments (policy review, tool selection, testing, reporting) to small businesses, charging per-assessment fees and building a reputation that leads to repeat contracts.
  • University ICT departments and research labs in Nairobi or Kisii - you teach secure coding practices, mentor student developers, and lead campus-wide application security audits, receiving a faculty stipend or grant-based remuneration.
  • Manufacturing firms with proprietary control software in Thika - you examine embedded system components, test for buffer overflows, and harden configuration files, earning a role as an in-house application security engineer.

Your ability to protect software from real-world threats will make you an essential asset in any Kenyan organisation that relies on digital solutions. Keep sharpening these skills, and the opportunities to safeguard the nation’s data - and your own future - will keep expanding.

Chapters

2 past papers for this unit →

What Secure Software Application covers: 41 main topics in 6 chapters

1. Identify software to be secured

  1. 1.1 Meaning of Terms
  2. 1.2 Types of software
  3. 1.3 Classification of software and their application
  4. 1.4 Factors influencing software selection
  5. 1.5 Identify Software That Needs Security
  6. 1.6 Identify existing list of installed software
  7. 1.7 Check software security updates
  8. 1.8 Research CVE Vulnerabilities for listed software

2. Establish tools for application security assessment

  1. 2.1 Types of tools used in software application security assessment
  2. 2.2 Assessing software application
  3. 2.3 OWASP Security Knowledge framework (SKF) Threat Modelling
  4. 2.4 Perform common vulnerabilities
  5. 2.5 Asses the security posture of a web application
  6. 2.6 Conduct security assessment using tools

3. Perform application security assessment

  1. 3.1 Introduction to application security
  2. 3.2 Phases of application security
  3. 3.3 Reconnaissance and information gathering
  4. 3.4 Threat modelling
  5. 3.5 Vulnerability Assessment
  6. 3.6 Exploitation and verification
  7. 3.7 Best practices

4. Harden software application

  1. 4.1 Introduction to Software Hardening
  2. 4.2 Basic security principles for software applications
  3. 4.3 Software configuration
  4. 4.4 Common threats to applications
  5. 4.5 Software Vulnerabilities
  6. 4.6 Security measures in software application
  7. 4.7 Hardening techniques

5. Monitor application security performance

  1. 5.1 Factors to consider in monitoring of application security performance
  2. 5.2 Implementation of monitoring solutions
  3. 5.3 Logs management and monitoring
  4. 5.4 Key Metrics to Monitor
  5. 5.5 Web applications logs and log management tools
  6. 5.6 Advanced monitoring tools and techniques

6. Prepare a report on software security

  1. 6.1 Application summary
  2. 6.2 Methodology
  3. 6.3 Vulnerabilities and Risks
  4. 6.4 Security Controls
  5. 6.5 Recommendations
  6. 6.6 Conclusion
  7. 6.7 Appendices

Revise this unit

3 more for this unit

Beyond the syllabus

Other units in Module III