Duration
1 day
1. Introduction
- Welcome
- What you need to know?
- Introduction to web application security
- What is Security
- Defense in Depth
- Basic Security Rules
- Building Secure Web Applications Guidelines
- 2. Security Concepts & Practices
- All input is tainted
- Whitelist and Blacklist Filtering
- Filtering the Input
- Escaping the output
- Filtering and Validation
- Register Globals and security vulnerability
- 3. Security Attacks & Preventions
- All input is tainted
- SQL Injection
- Cross Site Scripting(XSS)
- Cross Site Request Forgery (CSRF)
- Include/Require File Extensions
- Password Hashing
- Directory Listing
- HttpOnly Cookies
- What you shouldn't store in cookies
- Session Hijacking
- User Defined File Includes
- Error Reporting
- 4. Conclusion
- QA
- Useful Security Resources
- Feedback
Programme scope, delivery arrangements and suitability are confirmed during enquiry.