Prerequisites

Before attending this course participants should be familiar with coding web applications in Java or C#.

Course Modules

  • 1. Security Basics & Terminology
  • 2. OWASP Top Ten - A1 Injection
  • 3. OWASP Top Ten - A2 - Broken Authentication
  • 4. OWASP Top Ten - A3 - Sensitive Data Exposure
  • 5. OWASP Top Ten - A4 - XML External Entities (XXE)
  • 6. OWASP Top Ten - A5 - Broken Access Control
  • 7. OWASP Top Ten - A6 - Security Misconfiguration
  • 8. OWASP Top Ten - A7 - Cross-site Scripting (XSS)
  • 9. OWASP Top Ten - A8 - Insecure Deserialization
  • 10. OWASP Top Ten - A9 - Using Components with Known Vulnerabilities
  • 11. OWASP Top Ten - A10 - Insufficient Logging & Monitoring
  • 12. Web Application Security Beyond The Top Ten
  • 13. Common Software Security Weaknesses - Input Validation
  • 14. Security Feature of Java
  • 15. Security Features of .NET
  • 16. Time and State
  • 17. Working with Errors
  • 18. Code Quality
  • 19. Secure Coding Principles
  • 20. Additional Resources