Web Application Security (WAS)

Trainers will engage participants with lectures, live attack demonstrations and practical examples followed by individual hands-on exercise scenarios. Training is interactive, practical, and besides active participation also full of attack stories that help to change the perspective and understanding of real life security threats.

Koolitus toimub koostöös Clarified Security-ga.

NB! Koolitus on inglise keeles.

Target audience:WebApp developers, maintainers, web server or hosting providers/administrators, information security specialists and managers, testers.

Length: 32 academic hours

The prerequisite for issuing the certificate is full participation in training.

The training topics and description:

Web Application security essentials (4 parts, 8 lectures with practical demos and exercises for each vulnerability, including complex attack scenarios):

Client-Side attacks

• Introduction, Client-Server system
• OWASP (Top 10, ASVS)
• Input data
• GET vs POST
• HTTP vs HTTPS
• Controlling the thick client (Java applet, Flash, etc.,)
• XSS (Cross-Site-Scripting)
• Session security, cookies, session hijacking
• OSRF/CSRF (On-Site and Cross-Site Request Forgery)
• UI Redress Attacks (inc ClickJacking, CursorJacking)
• Combined client side attacks

Server-Side attacks

• Password security, crypto, brute-force, dictionary, sensitive data
• Authentication and authorization errors, "remember me" features
• Business logic implementation errors
• Direct Object Reference mistakes
• SQL injection
• Code and Command injection
• source code and structure defence, attack code upload, configuration
• File handling (file extensions, public folder, execution, enumeration and quessing, meta info)
• File inclusion (LFI, RFI, RCE, NULL-Byte)
• File upload
• Other file insertion vectors (log files)
• Configuration (Java/PHP, error messages (what to show & what to log), Apache, file permissions)
• Google hacking

Koolitus toimub aadressil Lõõtsa 12, Tallinn. Kell 9:00-17:00

IT koolitus on Eesti Töötukassa koolituskaardi koostööpartner.

Soovitame tutvuda ka tööandjatele suunatud Töötukassa poolt pakutavate täiendkoolituste toetustega: koolitustoetus tööandjatele ning töötaja koolituskulude hüvitamine tööandjale.

Näeme koolitusel!