Web Application Security Fundamentals Training

Start Date/Time: 2009-10-05 09:00:00
End Date/Time: 2009-10-07 17:30:00

IT Group in partnership with SeQure Technologies brings you Web Application Security Fundamentals Training.

Agenda:

The internet today is now an essential tool in bringing together information, personalities, businesses, and more. It enables us to communicate, buy, sell, or trade in our own terms. For all of us users, the stakes are high, for companies who derive revenue from e-commerce, users who trust web applications with sensitive information, and for the criminals who are there waiting for an opportunity to steal payment details or compromise financial databases. This training focuses on how we could start to protect our web applications. Remember, using 128-bit encryption is just the start, and perimiter firewalls are almost rendered useless in web attacks. There are things like cross site scripting, SQL injections, directory traversals, session hijacking, and a lot more to take care of.

Course Outline:

1. Introduction
   a. Web Application Security Overview
   b. The Vulnerability Life Cycle
   c. Writing Bad Code
   d. Web Languages
   e. Web and Databases Servers
   
   
2. Web Application Technologies
   a. The HTTP Protocol
   b. Web Functionality
   c. Encoding Schemes
   
   
3. Web Defense Mechanisms
   a. Authentication
   b. Session Management
   c. Access Control
   d. Input Handling
   e. Boundary Validation
   
   
4. Web Hacking Methodology
   a. Profiling the Application
   b. Client-side Controls
   c. Attacking Authentication
   d. Attacking Authorization
   e. Attacking Session State Management
   f. Code Injections
   g. Directory Path Traversals
   h. Hacking Web Users
   i. Exploiting Information Disclosure Attacking Web Servers
   
   
5. Web Security Practices
   a. Web Security Assessments
   b. Secure Coding
   c. Developing with Security in Mind

Training Details:

• Duration: 3 days
  
  
• Schedule: July 15 -17, 2009
  
  
• Time: 9:00 am to 5:00 pm
  
  
• Venue: 2/F Unit 8, Topy's Place Building, cor. Industria and Economia Sts., Bagumbayan, Libis, QC
  Philippines, 1110
  
  
• Course Fee: Php 15,000.00 (Exclusive of 12% VAT) Course fee is inclusive of handouts, certificate, snacks and lunch. Please make all checks payable to Posh Marketing Services.
  
  
• For more details, please call Malou Chan at 888-24-37 ext 102 or email inquiry@sequretech.com. Cancellation of registration should be made seven working-days before the training date. Otherwise, 50% of the training fee shall be charged. No show during the training shall be charged 100% of the training fee.