The (Un-)Secure Web - Web security awareness training for developers and administrators
Recent
studies indicate that more than 90% of all deployed webapplications are
affected by serious security bugs. Effective countermeasures to
mitigate attacks against web applications are already developed.
However, their availability to developers as well as administrators
does not seem to have any effect on this circumstance.
Most often this is a result of lacking security awareness. Thededicated
training of security awareness regarding web applications improves the
quality of developed applications essentially. Only ifyou know your
enemy, you can fight back effectively.
Goals
While
participating the "The (Un-)Secure Web" training you will learn how
hackers attack a web application. Starting with common approaches you
train how to attack a web server, a web application itself as well as
backend systems like databases. In hands-on trainings you willperform
the single steps of recent attacks and experience the attack paths of a
real hacker.
Finally you will discuss possible countermeasures mitigating attacks and learn the basics of secure software development.
Content
- Environments at risk
- Attack possibilities
- Countermeasures
- Hands-on web hacking
- Secure software development
Requirements
- Basic knowledge of
- web application development
- webservers
- HTTP and HTML
- Laptop
|
