Secure Code Warrior Experience

·

Last week I joined a company tournament which was all about finding security problems in the given code.

So, what is Secure Code Warrior (SCW)? SCW is a learning and assessment platform where you can learn and solve challenges about finding and solving security problems.

If you want to test your skills it has two stages. You start with finding the problem according to the given definition. For example, it tells you to find Cross-Side scripting or SQL injection problems in a given code. And as a user, you are responsible to choose the right location of the problem in the code.

After choosing the section, if it is correct, it gives you a point, you gain accuracy and it redirects you to the second stage. If it is incorrect, it gives you an option to try again or get the hint. Hints are all about watching brief information about the problem. And also if you want more detail, you can take a detailed OWASP course about the problem.

The second phase is about choosing the right solution. It displays a split screen which shows the comparison between problem and solution. There are four solutions to assess. If the chosen solution is correct, you are getting the next question. If the chosen solution is incorrect, you can try it again or get a hint.

So the tournament concept was like this and also it was time limited. It was one hour long. Before joining the tournament user can choose the programming language they want. I tried to solve problems on C# Web API, and also tried Go and Swift as well.

With SCW, you can test your skills on any kind of framework like Mobile, Web API, Frontend etc.

As a result, it was a good experience for me, I found out my weaknesses and also had an idea of the capabilities of my coding skills. I strongly recommend having this experience if you get the chance.

Reference links;

Secure Code Warrior Website

OWASP