Web Application Security (WAS) (inglise keeles)

Training duration: 4 days (32 ac h) of instructions heavily mixed with hands-on labs. Duration may depend on audience

Group size: 12 participants maximum

Target audience: WebApp developers, maintainers, web server or hosting providers/administrators, information security specialists and managers, testers

Web Application Security training consists of two modules:

• Client-Side Attacks
• Server-Side Attacks

The training is held by our partner Clarified Security.

Ideology of this training

This training focuses on attacks so that the need for defence is better understood. OWASP project should be the bible of everyone dealing with WebApp development and security and OWASP ASVS (Application Security Verification Standard) is one of the golden standards of WebApp security testing. This training will cover all WebApp attack types and instills this knowledge with lot of hands-on exercises. With first-hand experience in those attacks, participants are better armed with understanding the attacks and why they are conducted.

Contents of this training

Web Application security essentials (4 parts, 8 lectures with practical demos and exercises for each vulnerability, including complex attack scenarios):

*All attacks have hands-on demos, exercises and “lessons learned” from our pentesting services.

Training methods

Trainers will engage participants with lectures, live attack demonstrations and practical examples followed by individual hands-on exercise scenarios. Training is interactive, practical, and besides active participation also full of attack stories that help to change the perspective and understanding of real life security threats.

Täienduskoolituse õppekavarühm: Informatsiooni- ja kommunikatsioonitehnoloogia interdistsiplinaarne õppekavarühm