Prerequisites
Before attending this course participants should be familiar with coding web applications in Java or C#.
Course Modules
- 1. Security Basics & Terminology
- 2. OWASP Top Ten - A1 Injection
- 3. OWASP Top Ten - A2 - Broken Authentication
- 4. OWASP Top Ten - A3 - Sensitive Data Exposure
- 5. OWASP Top Ten - A4 - XML External Entities (XXE)
- 6. OWASP Top Ten - A5 - Broken Access Control
- 7. OWASP Top Ten - A6 - Security Misconfiguration
- 8. OWASP Top Ten - A7 - Cross-site Scripting (XSS)
- 9. OWASP Top Ten - A8 - Insecure Deserialization
- 10. OWASP Top Ten - A9 - Using Components with Known Vulnerabilities
- 11. OWASP Top Ten - A10 - Insufficient Logging & Monitoring
- 12. Web Application Security Beyond The Top Ten
- 13. Common Software Security Weaknesses - Input Validation
- 14. Security Feature of Java
- 15. Security Features of .NET
- 16. Time and State
- 17. Working with Errors
- 18. Code Quality
- 19. Secure Coding Principles
- 20. Additional Resources