BETHESDA, Md., Dec. 15 /PRNewswire-USNewswire/ -- SANS Institute has announced that it will host its first ever training event and WhatWorks Summit focused solely on Application Security and Secure Coding - SANS AppSec 2010 and WhatWorks Summit. Take first rate courses and hear from industry thought leaders such as Gary McGraw of Cigital and Michael Howard of Microsoft. The event will be held in San Francisco, CA January 29 - February 5 at the Sheraton Fisherman's Wharf hotel. Visit http://www.sans.org/info/51553 for the event overview or http://www.sans.org/info/51558 to learn more about the Summit.

Today, over 70% of attacks come through the application layer instead of the operating systems. Attacks on web applications constitute more than 60% of the total attack attempts observed on the Internet. Developers should be trained and certified to write secure code so they are not unwittingly creating weaknesses and vulnerabilities that will enable attacks. SANS AppSec 2010 will feature seven of SANS' application security courses designed to equip developers with the skills they need to write truly secure code and proactively defend web apps. Courses include:

• Security 542: Web App Penetration Testing and Ethical Hacking http://www.sans.org/info/51563
• Developer 422: Defending Web Applications Security Essentials http://www.sans.org/info/51568
• Developer 541: Secure Coding in Java/JEE: Developing Defensible Applications http://www.sans.org/info/51573
• Developer 544: Secure Coding in .NET: Developing Defensible Applications http://www.sans.org/info/51578
• Developer 545: Secure Coding in PHP: Developing Defensible Applications http://www.sans.org/info/51583
• Developer 534: Secure Code Review for Java Web Apps http://www.sans.org/info/51588
• Developer 320: Introduction to the Microsoft Security Development Lifecycle http://www.sans.org/info/51593

These courses address the actual problems application developers and programmers face every day. World-class instructors such as David Rice, Frank Kim and Dr. Johannes Ullrich are practitioners who solve real-world problems and who can present "proven" solutions. In addition to being seasoned professionals, SANS faculty members are extraordinary speakers. They bring the information to life with real-world case-studies, and enable you to leave with the knowledge and confidence to put what you learned to work the day you return to the office.

WhatWorks Summit - In conjunction with this training event, we will also be conducting a SANS WhatWorks in Web Application Security Summit 2010. This two-day summit will run February 3 - 5 and features industry leaders such as Gary McGraw of Cigital, Michael Howard of Microsoft and David Rice, author of Geekonomics. In addition, you'll hear from industry experts and users as they outline what has and has not worked in their efforts to further application security. These lessons will help you save months in product evaluation and project planning, and to simply avoid errors other companies have made. There's no better way to find out what others have tried and what works in real life.

To learn more about this event, go to http://www.sans.org/info/51553 - to learn about the WhatWorks Summit visit http://www.sans.org/info/51558.

SANS (http://www.sans.org/info/51598) was established in 1989 as a cooperative research and education organization. Its programs reach more than 165,000 security professionals, auditors, system administrators and network administrators who share the lessons they are learning and jointly find solutions to the challenges they face. At the heart of SANS are the many security practitioners in government agencies, corporations, and universities around the world who invest hundreds of hours each year in research and teaching to help the entire information security community.

SOURCE SANS Institute