Enjoying the preview?
This is the free first lesson. Get full access — request a demo or sign in.
Programming Foundations: Web Security
In this course, you will learn the five most common vulnerabilities of a web application and how to prevent those vulnerabilities.Preview the first lesson free — get full access to all 32 lessons.
Beginner Provider : Jay Shafftstall 6 chapters · 32 Lessons · 1h 20m in Arabic, German, English, Spanish, French, Portuguese, Chinese
Course Description
In this course, you will learn the five most common vulnerabilities of a web application and how to prevent those vulnerabilities. You will also learn underlying principles of web security and how to identify the capabilities that different types of users should have in a web app. You'll also learn how to keep sensitive user data private. All this will be done in the context of a sample web app. By the end of the course, you will be able to write a web app that is secure from the five most common vulnerabilities.
What You'll Learn
- Identify the five most common web application vulnerabilities and how to prevent them
- Apply core security principles including least privilege, simplicity, and Defense-in-Depth
- Defend against attacks such as cross-site scripting, SQL injection, session hijacking, and denial-of-service
- Secure user input and output and distinguish whitelist from blacklist approaches
- Protect sensitive user data by storing it encrypted and enforcing strong passwords
- Write a web app that is secure from the five most common vulnerabilities
Key Takeaways
- The course teaches the five most common web application vulnerabilities and how to fix them in the context of a sample web app.
- It covers underlying security principles, including the principle of least privilege, simplicity, and Defense-in-Depth.
- Learners study specific attacks such as cross-site scripting, URL manipulation, remote code execution, denial-of-service, SQL injection, and session hijacking.
- The course explains how to keep sensitive user data private, including working with encrypted passwords and the importance of strong passwords.
- It distinguishes between users and hackers and between different types of users and their capabilities in a web app.
Frequently Asked Questions
Who is this course for?
It is for people who want to learn the five most common web application vulnerabilities, how to prevent them, and how to write a secure web app.
What vulnerabilities and attacks does the course cover?
It covers the five most common vulnerabilities along with cross-site scripting, URL manipulation, filename vulnerabilities, remote code execution, file upload abuse, denial-of-service, session hijacking, cross-site request forgery, session fixation, injection attacks, broken authentication, and SQL injection.
What will I be able to do by the end of the course?
By the end of the course, you will be able to write a web app that is secure from the five most common vulnerabilities.
How is the course taught?
The vulnerabilities and prevention techniques are taught in the context of a sample web app.
What security principles does the course teach?
It teaches the principle of least privilege, the principle of simplicity, and the principle of Defense-in-Depth, along with concepts such as authorization, threat modeling, and whitelist versus blacklist approaches.
