Session 1 of 4 sessions.
Today’s internet is a rough place, with robots, spies, states, hackers, and other evil entities constantly roaming around the web looking for vulnerable web applications to attack. Because of this, it is important that every developer has the necessary skills to protect their applications. In this first session, you will learn the fundamentals of how the web works, how to protect your applications, and how attacks are performed. It goes beyond the OWASP TOP-10 and gives you many concrete examples of how to fail and how to protect your applications.
The 4 sessions wil cover:
● Social Engineering
● Securing HTTPS
● Unicode
● Cross-Site Scripting (XSS)
● Preventing XSS with Content Security Policy (CSP)
● Cross-Site Request Forgery (CSRF)
● Securing your cookies
● Same site cookies
● Cross-Origin Resource Sharing (CORS)
● SQL Injections
● Authentication
● Application DoS attacks
● Securing passwords
● Preventing data leaks
● Intercepting proxies
● Supply-chain attacks
● Subresource Integrity
● And much more…
Audience
This course targets developers on all platforms, including .NET, Java, and PHP.
Prerequisites
You should have basic web development experience, including HTML, CSS and JavaScript. After the course, the participant can: After the course, the participant will have a thorough understanding of web security, capable of identifying and defending against common security threats such as XSS, CSRF, and SQL injections, ensuring robust protection for web applications.
Instructor
Tore Nestenius is an independent software consultant and trainer based in Helsingborg, Sweden. For the last 10 years, he has been training developers all around the world in software architecture, web security, OpenID-connect, C#/.NET and domain-driven design.
Dates for session 2, 3 and 4:
Session 2: Thursday, November 7, 17-20
Session 3: Thursday, November 21, 17-20
Session 4: Monday, December 2, 17-20
Direct link will be sent on the day of the course.
The course will not be recorded.
Language and materials are in English.