Web Application Security

SpiralTrain BV

The course Web Application Security from SpiralTrain discusses the most common security risks in web applications and how they can be tackled.

Prijs

vanaf € 1.699

Niveau

Niet opgegeven

Soort

Training

Thema

Automatisering en ICT, Opleiden en onderwijs

Meer informatie en aanmelden bij SpiralTrain BV

Beschrijving

Security Issues The course starts with a discussion of the most common security issues as identified in the Open Web Application Security Project (OWASP). This includes the risks of vulnerabilities in libraries, the importance of minimizing the attack surface of an application and vulnerabilities in authentication control. Cross Site Scripting In Cross-Site Scripting (XSS) attacks, malicious scripts are injected into a web site. Typically, this happens because the attacker makes JavaScript code run in the browser. XSS attacks are common and can occur anywhere in the application where user input is not validated. SQL Injection Attention is also paid to SQL Injection, where an attacker places malicious code in SQL statements. SQL Injection is usually due to unchecked user input being used to create SQL statements. The consequences of SQL Injection can be serious such as data corruption, data theft or data destruction. Cross Site Request Forgery Next up in the course is the discussion of CSRF. Attention is paid to how CSRF executes malicious commands on behalf of a user trusted by the web application. Specially designed image tags or hidden forms are often used for this.