This program introduces participants to AI-assisted development practices (“Vibe Coding”) while integrating essential security principles. The learning path combines theory, practical examples, and collaborative workshops to develop a critical understanding of the opportunities and risks associated with generative AI in software development. |
Objectives | - Position Vibe Coding within the Software Development Life Cycle (SDLC)
- Understand how Vibe Coding integrates into various SDLC phases and helps optimize development processes
- Write prompts that meet industry standards
- Learn to formulate clear, secure, and effective instructions to generate code that adheres to best practices for security and quality
- Identify risks related to AI-generated applications
- Be able to spot potential vulnerabilities (dependencies, insufficient documentation, security or licensing issues) and suggest solutions
- Implement secure code review and deployment processes
- Use tools, checklists, and proven practices to ensure the reliability, compliance, and security of deliverables
|
Contents | Week 1: Software Development Practice and Vibe Coding
Overview of the SDLC and CI/CD pipelines (planning, coding, testing, deployment, maintenance). Discover how Vibe Coding accelerates rapid prototyping through low-code and AI model integration. Risk analysis (lack of version control, hidden dependencies, reproducibility issues) and practical comparison: creating a "to-do" application with Vibe Coding vs. traditional workflow. Week 2: Secure Prompt Engineering Practices
Prompt engineering principles applied to security: accuracy, constraints, test cases. Examples of secure and insecure prompts. Introduction to security frameworks (OWASP Top 10, least privilege). Practice: improving imperfect prompts to secure versions. Week 3: Security Pitfalls in Vibe Coding Applications
Learn to use Copilot to transform your Teams interactions, Outlook emails, and project tracking. Automate tasks, gain clarity, and improve team coordination. Week 4: Secure Code Review and Deployment
Principles of secure code review adapted to Vibe Coding: checklist (authentication, authorization, data validation, error handling, logging). Deployment considerations (API keys, secrets management, environment configuration). Practice: peer review, applying the checklist, and securing code. Conclusion with best practices and resources for secure use of Vibe Coding. |
