Secure Coding Principles - OWASP Top 10 (English)

Deze cursus hebben we niet meer in ons assortiment maar nog wel andere cursussen, bijvoorbeeld:

Er zijn geen gerelateerde cursussen.

Kunnen wij je helpen?

Deze cursus is vervangen door CV000376 – Secure Coding Principles – OWASP Top 10
The Open Web Application Security Project (OWASP) Top 10 is widely recognized as a powerful awareness document that represents a broad consensus among security experts about the most critical security risks to web applications. For many companies, security awareness usually starts with the OWASP Top 10. In practice, many companies have difficulty applying the mitigations, often due to misinterpretation.

This is due to the following facts:

The right information is hard to acquire from the internet.
Developers do not have the knowledge to perform verification on their own implementations.

In this course, we will walk through the OWASP Top 10 together with the developers and see what the most common mistakes are in practice. Each topic will be highlighted, and vulnerabilities and exploits will be performed on various demo environments that are made available especially for this purpose.

After exploiting the vulnerabilities, we will battle them hands-on in a test application that has been adapted to the users own development (language) preferences.

We bieden deze cursus ook in het Nederlands aan, bekijk het hier: Secure Coding Principles – OWASP Top 10.

Doel

After completing this course, you will be able to:
Identify vulnerabilities and perform verification on your code against the most common risks defined in OWASP Top 10.
Execute countermeasures on code found to be vulnerable against the most common risks defined in OWASP Top 10.

Doelgroep

Developers

Voorkennis

Java 17 Programming Language – deel 1 of vergelijkbare kennis.
Programmeren in C# (55339) of vergelijkbare kennis.
De programmeertaal Python – voor ervaren programmeurs of vergelijkbare kennis.
No specific security knowledge is required for this course, all injections and mitigations will be explained in detail. We do expect you to have coding experience.

Bijzonderheden

The teaching language during the course is English, unless all course participants are Dutch-speaking and prefer training in Dutch.

Lucas Ditvoorst

senior accountmanager

Onderwerpen

A01:2021-Broken Access Control
A02:2021-Cryptographic Failures
A03:2021-Injection slides
A04:2021-Insecure Design
A05:2021-Security Misconfiguration

A06:2021-Vulnerable and Outdated Components
A07:2021-Identification and Authentication Failures
A08:2021-Software and Data Integrity Failures
A09:2021-Security Logging and Monitoring Failures
A10:2021-Server-Side Request Forgery

Planning & Prijs

Gerelateerde cursussen

Er zijn geen gerelateerde cursussen.

Ervaringen

ervaringen verzameld via

"Training was prima, goede tips gekregen met af en toe een grap en grol. Locatie was prima, goed verzogd vwb koffie/thee, fruit en koekje. Mensen ook zeer vriendelijk. Lunch was perfect en zeer uitgebreid."

9

"De cursus was goed, en de verzorging ook!Ik heb er veel van opgestoken! De lokatie in Nieuwegein is goed te bereiken met het openbaar vervoer, dus dat is prettig. Tot een volgenden keer."

10

"Ik vond de training erg leerzaam. De inhoud was van een hoog niveau en de docent was goed thuis in de materie. Ik stel het vooral op prijs dat er diep op de concepten werd ingegaan."

9

Categorieën

Onderwerpen

Leveranciers

Prijs