Introduction to web application security

The training is intended for IT practitioners – especially developers and QA engineers, but also system administrators and managers who want to know how web applications are attacked today and how to prevent it.

Participant will gain introductory, yet comprehensive, practical knowledge about web application attacks and defense mechanisms, backed by multiple examples and exercises.

• Basic programming skills (any language)
• Basics knowledge about JavaScript and SQL syntax
• Basic knowledge about IT solutions architecture, web applications, OS and networks

• Training: English

1. Introduction to web application security
   • Web application architecture
   • OWASP Top 10 2021
2. Vulnerability analysis (exploitation, defense, case studies)
   • Cross-site scripting (XSS)
   • Cross-Site Request Forgery (CSRF)
   • Directory Traversal
   • Unrestricted File Upload
   • Insecure Direct Object Reference (IDOR)
   • SQL/NoSQL injection
   • Denial of Service
3. Cyber hygiene