Platinum Sponsors
Gold Sponsors
Silver Sponsors
Partners
Partner events
Foundations of Web Application Security
On Friday 2008-06-27
A whirlwind tour of the most common web application security flaws as defined by the OWASP Top 10, and how to avoid them using Java.
| Presenter Dave Wichers | |
| Training | from 09.00 - 17.00 |
| Location | TECHNOPARK |
| Check the map | |
| Abstract | Most developers, IT professionals, and auditors learn what they know about application security on the job, usually by making mistakes. Application security is just not a part of many computer science curricula today and most organizations have not focused on instituting a culture that includes application security as a core part of their IT security efforts. This powerful one day course focuses on the most common web application security problems, including the OWASP Top Ten. The course will introduce and demonstrate hacking techniques, illustrating how application vulnerabilities can be exploited so students really understand how to avoid introducing such vulnerabilities in their code.
This course includes coverage of the following common vulnerability areas (the OWASP Top 10): |
| Hands on | To cement the principles discussed, students can participate in a number of hands-on security testing exercises where they attack a live web application (i.e., WebGoat) that has been seeded with common web application vulnerabilities. The students will use proxy tools commonly used by the hacker community to complete the exercises. Students need to bring their own windows based laptop to participate in the exercises |
| Audience | Developers who want to understand the most common web application security flaws, and how to avoid them. |
| Level | Intermediate |
| Prerequisite | Basic knowledge of Java. |
| Duration | Full day |
| History | Variations of this course have been presented by Aspect Security instructors hundreds of time over the past six years, mostly onsite at customer facilities. It also has been presented at almost every OWASP conference (www.owasp.org/index.php/Category:OWASP_AppSec_Conference) as well as through SANS and numerous other conferences. |
| Speaker Bio | Dave Wichers is a cofounder and Chief Operating Officer (COO) of Aspect Security, a company that specializes in application security services. Dave is also a member of the OWASP board, is the OWASP Conferences Chair, and is a coauthor of the OWASP Top Ten. The Open Web Application Security Project (OWASP) (www.owasp.org) is a worldwide free and open community focused on improving the security of application software. Mr. Wichers has over 20 years of experience in the information security field, and has focused exclusively on application security for the past 10. At Aspect, in addition to his COO duties, he is Aspect's application security courseware lead, one of their chief instructors, and provides a wide variety of application security consulting services to Aspect's clients. Prior to starting Aspect, he ran the Application Security Services Group at Exodus Communications. Mr. Wichers has a Bachelors and Masters degree in Computer Science, is a CISSP, and a CISM. |
| Contact | Dave Wichers |
Media Partners
