Web Application Testing

#text-block-10 { margin-bottom:0px; text-align:left; }

IT security and secure coding
* Nature of security
* IT security related terms
* Definition of risk
* Different aspects of IT security
* Requirements of different application areas
* IT security vs. secure coding
* From vulnerabilities to botnets and cybercrime
* Classification of security flaws
Web application vulnerabilities
* SQL Injection
* Other injection flaws
* Cross-Site Scripting (XSS)
* Broken authentication and session management
* Cross Site Request Forgery (CSRF)
* Insecure direct object reference
* Unvalidated file upload
* Security misconfiguration
* Failure to restrict URL access
* Transport layer security issues
* Unvalidated redirects and forwards
Client-side security
* JavaScript security
* Ajax security
* HTML5 Security

#text-block-11 { margin-bottom:0px; text-align:left; }

Security of RESTful web services
* Security of RESTfulweb services
* REST-related technologies for security
* REST-related vulnerabilities
Security testing
* Security testing
* Introduction to security testing
* System level hardening and mitigation techniques
* Security testing methodology
* Security testing techniques
* Protection principles
Using security testing tools
* Security testing tools – overview
* Web vulnerability scanners
* SQL injection tools
* Public database
* The most exploited flaw in Java
* The actual mistake in java.util.Calendar – spot the bug!
* Google hacking
* Proxy servers and sniffers
* Exercise – Capturing network traffic
* Static code analysis
* Summary