Securing Web Applications, Services and Servers: Hands-On
You Will Learn How To
* Implement and test secure Web applications in your organisation
* Identify, diagnose and correct the most serious Web application vulnerabilities
* Configure a Web server to encrypt Web traffic with HTTPS
* Protect Ajax-powered Web 2.0 applications
* Secure XML Web services with WS-Security
* Audit Web application security with source-code and application scanning
Throughout this course, extensive hands-on exercises based on an evolving case study provide you with practical experience in securing applications. Exercises include:
* Creating a trust boundary with proper input validation
* Avoiding cross-site scripting (XSS) and cross-site request forgery (CSRF/XSRF)
* Preventing SQL injection vulnerabilities
* Implementing URL access restrictions
* Detecting unauthorised file system modification
* Enabling HTTPS on a Web server
* Protecting Web services with WS-Security
* Identifying vulnerabilities with an application scanner