Web Application Security

SpiralTrain BV

The course Web Application Security from SpiralTrain discusses the most common security risks in web applications and how they can be tackled.

Price

from €1,699

Level

Not specified

Kind

Training

Subject

Automation and IT, Training and education

More information and registration at SpiralTrain BV

Description

Security Issues The course starts with a discussion of the most common security issues as identified in the Open Web Application Security Project (OWASP). This includes the risks of vulnerabilities in libraries, the importance of minimizing the attack surface of an application and vulnerabilities in authentication control. Cross Site Scripting In Cross-Site Scripting (XSS) attacks, malicious scripts are injected into a web site. Typically, this happens because the attacker makes JavaScript code run in the browser. XSS attacks are common and can occur anywhere in the application where user input is not validated. SQL Injection Attention is also paid to SQL Injection, where an attacker places malicious code in SQL statements. SQL Injection is usually due to unchecked user input being used to create SQL statements. The consequences of SQL Injection can be serious such as data corruption, data theft or data destruction. Cross Site Request Forgery Next up in the course is the discussion of CSRF. Attention is paid to how CSRF executes malicious commands on behalf of a user trusted by the web application. Specially designed image tags or hidden forms are often used for this.