AppSec Europe 2006/Training - Revision history

Alison.McNamee: /* T1. Foundations of Web Application Security - One Day Course - May 29th, 2006 */

2008-02-15T16:25:10Z

‎T1. Foundations of Web Application Security - One Day Course - May 29th, 2006

Esheridan: /* T2. Web Services and XML Security - One Day Course - May 29th, 2006 */

2006-10-11T19:51:25Z

‎T2. Web Services and XML Security - One Day Course - May 29th, 2006

Wichers: /* T1. Foundations of Web Application Security - One Day Course - May 29th, 2006 */

2006-10-09T14:13:48Z

‎T1. Foundations of Web Application Security - One Day Course - May 29th, 2006

Esheridan at 14:21, 30 May 2006

2006-05-30T14:21:40Z

Esheridan: /* T1. Foundations of Web Application Security - One Day Course - May 29th, 2006 */

2006-05-30T14:19:16Z

‎T1. Foundations of Web Application Security - One Day Course - May 29th, 2006

Esheridan at 14:17, 30 May 2006

2006-05-30T14:17:30Z

Esheridan at 14:17, 30 May 2006

2006-05-30T14:17:10Z

Esheridan: /* Conference Training Day - One Day Training Course - May 29th, 2006 */

2006-05-30T13:01:38Z

‎Conference Training Day - One Day Training Course - May 29th, 2006

Esheridan: /* Conference Training Day - One Day Training Course - May 29th, 2006 */

2006-05-30T13:01:20Z

‎Conference Training Day - One Day Training Course - May 29th, 2006

Esheridan: /* Conference Training Day - One Day Training Course - May 29th, 2006 */

2006-05-30T12:59:29Z

‎Conference Training Day - One Day Training Course - May 29th, 2006

@@ Line 79: / Line 79: @@
 '''Tutorial Provider'''
-This tutorial is provided by longtime OWASP contributor: [http://www.aspectsecurity.com http://www.owasp.org/docroot/owasp/img/members/aspect_logo.gif]
+This tutorial is provided by longtime OWASP contributor: [http://www.aspectsecurity.com https://www.owasp.org/images/c/c1/Aspect_logo_owasp.jpg]
 == T2. Web Services and XML Security - One Day Course - May 29th, 2006 ==

← Older revision		Revision as of 19:51, 11 October 2006
Line 105:		Line 105:

	[http://www.owasp.org/docroot/owasp/Registration Click here to register.]		[http://www.owasp.org/docroot/owasp/Registration Click here to register.]
		+
		+	''' Tutorial Provider '''
		+
		+	This tutorial is provided by [http://www.arctecgroup.net http://www.owasp.org/images/b/bc/Arctec_logo.jpeg]

← Older revision		Revision as of 14:13, 9 October 2006
Line 76:		Line 76:

	[http://www.owasp.org/docroot/owasp/Registration Click here to register.]		[http://www.owasp.org/docroot/owasp/Registration Click here to register.]
		+
		+	'''Tutorial Provider'''
		+
		+	This tutorial is provided by longtime OWASP contributor: [http://www.aspectsecurity.com http://www.owasp.org/docroot/owasp/img/members/aspect_logo.gif]

	== T2. Web Services and XML Security - One Day Course - May 29th, 2006 ==		== T2. Web Services and XML Security - One Day Course - May 29th, 2006 ==

@@ Line 72: / Line 72: @@
 Note: OWASP will not be able to supply laptops for students to use for these exercises. If you are interested in participating in the hands on portion of the course, please bring a Windows based laptop that supports Java.
 '''Registration'''
 [http://www.owasp.org/docroot/owasp/Registration Click here to register.]

@@ Line 59: / Line 59: @@
 For each area, the course covers the following:
-    * Theoretical foundations
+* Theoretical foundations
-    * Recommended security policies
+* Recommended security policies
-    * Common pitfalls when implementing
+* Common pitfalls when implementing
-    * Details on historical exploits
+* Details on historical exploits
-    * Best practices for implementation
+* Best practices for implementation
 Class begins at 8 AM and runs until 5 PM.
-Hands on Exercises
+'''Hands on Exercises'''
 To cement the principles delivered via the lecture portion of the course, students can participate in a number of hands-on security testing exercises. During the hands-on exercises students will attack a live web application (i.e., WebGoat) that has been seeded with common web application vulnerabilities. The students will use proxy tools commonly used by the hacker community to complete the exercises.
@@ Line 73: / Line 73: @@
 Note: OWASP will not be able to supply laptops for students to use for these exercises. If you are interested in participating in the hands on portion of the course, please bring a Windows based laptop that supports Java.
-Registration
+'''Registration'''
-Click here to register.
+[http://www.owasp.org/docroot/owasp/Registration Click here to register.]

← Older revision		Revision as of 14:17, 30 May 2006
Line 24:		Line 24:

	[https://www.owasp.org/docroot/owasp/Registration/index.jsp Click here] to register for either course.		[https://www.owasp.org/docroot/owasp/Registration/index.jsp Click here] to register for either course.
−

	== T1. Foundations of Web Application Security - One Day Course - May 29th, 2006 ==		== T1. Foundations of Web Application Security - One Day Course - May 29th, 2006 ==

← Older revision		Revision as of 14:17, 30 May 2006
Line 1:		Line 1:
−
	== Conference Training Day - One Day Training Course - May 29th, 2006 ==		== Conference Training Day - One Day Training Course - May 29th, 2006 ==

Line 25:		Line 24:

	[https://www.owasp.org/docroot/owasp/Registration/index.jsp Click here] to register for either course.		[https://www.owasp.org/docroot/owasp/Registration/index.jsp Click here] to register for either course.
		+
		+
		+	== T1. Foundations of Web Application Security - One Day Course - May 29th, 2006 ==
		+
		+	'''Course Overview'''
		+
		+	Most developers, IT professionals, and auditors learn what they know about application security on the job, usually by making mistakes. Application security is just not a part of many computer science curricula today and most organizations have not focused on instituting a culture that includes application security as a core part of their IT security efforts.
		+
		+	This powerful one day course focuses on the most common web application security problems, including the OWASP Top Ten. The course will introduce and demonstrate hacking techniques, illustrating how application vulnerabilities can be exploited so students really understand how to avoid introducing such vulnerabilities into their code.
		+
		+	'''Details'''
		+
		+	This course starts with a module designed to raise awareness of just how insecure most web applications are. We demonstrate how easily hackers are able to attack web applications, and what some of the most common and most significant vulnerabilities are. The course then provides an overview of how web applications work from a security perspective.
		+
		+	The next modules detail a number of specific security areas. We describe common vulnerabilities, present best practices, and discuss recommended approaches for avoiding such vulnerabilities. This course includes coverage of the following common vulnerability areas:
		+
		+	* Unvalidated Parameters *
		+	* Broken Access Control *
		+	* Broken Account and Session Management *
		+	* Cross-Site Scripting (XSS) Flaws *
		+	* Buffer Overflows *
		+	* Command Injection Flaws *
		+	* Error Handling Problems *
		+	* Insecure Use of Cryptography *
		+	* Denial of Service *
		+	* Web and Application Server Misconfiguration *
		+	* Poor Logging Practices
		+	* Caching, Pooling, and Reuse Errors
		+	* Code Quality
		+
		+	<nowiki>*</nowiki> The OWASP Top Ten Most Critical Web Application Vulnerabilities
		+
		+	Additional details on these are available at Aspect's Common Web Application Vulnerability Areas page.
		+
		+	For each area, the course covers the following:
		+
		+	* Theoretical foundations
		+	* Recommended security policies
		+	* Common pitfalls when implementing
		+	* Details on historical exploits
		+	* Best practices for implementation
		+
		+	Class begins at 8 AM and runs until 5 PM.
		+
		+	Hands on Exercises
		+
		+	To cement the principles delivered via the lecture portion of the course, students can participate in a number of hands-on security testing exercises. During the hands-on exercises students will attack a live web application (i.e., WebGoat) that has been seeded with common web application vulnerabilities. The students will use proxy tools commonly used by the hacker community to complete the exercises.
		+
		+	Note: OWASP will not be able to supply laptops for students to use for these exercises. If you are interested in participating in the hands on portion of the course, please bring a Windows based laptop that supports Java.
		+
		+	Registration
		+
		+	Click here to register.

@@ Line 15: / Line 15: @@
 '''Pricing'''
 Each course is 600 Euros for attendees of the OWASP conference.
 '''Location'''
 Training room at KU Leuven in College De Valk. T1 will be held in room DV3 01.08 and T2 will be in room DV3 01.10.
 '''Registration'''
-[http://www.owasp.org/docroot/owasp/Registration/index.jsp Click here] to register for either course.

← Older revision		Revision as of 13:01, 30 May 2006
Line 13:		Line 13:

	<center>*Note: Information corresponding to each training course is located below.</center>		<center>*Note: Information corresponding to each training course is located below.</center>
		+
		+	'''Pricing'''
		+	Each course is 600 Euros for attendees of the OWASP conference.
		+
		+	'''Location'''
		+	Training room at KU Leuven in College De Valk. T1 will be held in room DV3 01.08 and T2 will be in room DV3 01.10.
		+
		+	'''Registration'''
		+	[http://www.owasp.org/docroot/owasp/Registration/index.jsp Click here] to register for either course.

@@ Line 11: / Line 11: @@
   ! T2 || align="center" | Web Services and XML Security - One Day Course - May 29th, 2006
 |}
 <center>*Note: Information corresponding to each training course is located below.</center>