WebAppSec.php: Developing Secure Web Applications - Revision history

Achim: category OWASP/Training changed to OWASP Training

2014-11-10T21:24:05Z

category OWASP/Training changed to OWASP Training

Achim: category changed to OWASP/Training AppSec_DC_2010

2014-11-10T20:49:33Z

category changed to OWASP/Training AppSec_DC_2010

Robert H'obbes' Zakon at 18:05, 21 March 2012

2012-03-21T18:05:08Z

Robert H'obbes' Zakon at 18:04, 21 March 2012

2012-03-21T18:04:02Z

Robert H'obbes' Zakon: added info re. course materials & certificate

2010-10-05T20:39:39Z

added info re. course materials & certificate

Robert H'obbes' Zakon: updated description

2010-09-27T14:45:38Z

updated description

Dallendoug: added link header

2010-09-21T05:06:29Z

added link header

Mark.bristow at 22:22, 16 September 2010

2010-09-16T22:22:07Z

Mark.bristow at 22:21, 16 September 2010

2010-09-16T22:21:11Z

Mark.bristow: Created page with 'NOTOC ===Description=== Course Length: 1 Day Web applications are the new frontier of wide‐spread security breaches. This tutorial will guide through development practice…'

2010-09-16T22:20:47Z

Created page with '__NOTOC__ ===Description=== Course Length: 1 Day Web applications are the new frontier of wide‐spread security breaches. This tutorial will guide through development practice…'

New page

__NOTOC__
===Description===
Course Length: 1 Day

Web applications are the new frontier of wide‐spread security breaches. This tutorial will guide through development practices to ensure the security and integrity of web applications, in turn protecting user data and the infrastructure the application runs on. Several attack types and risks will be reviewed (including OWASP’s Top 10), along with how the proper development practices can mitigate their damage. Although examples covered are PHP‐based, much of the content is also applicable to other languages.

===Requirements===
None

===Objectives===
Skill: Basic

Attendees will gain the knowledge required to develop secure web applications, along with an understanding of various attack types against web apps and how they are mitigated by the proper coding techniques. The main learning objectives are:
# Developing the skills for securely coding web applications
# Reviewing existing web vulnerabilities and their impact
# Understanding how the proper development techniques mitigates known and some unknown web
vulnerabilities

===Instructor===
'''Instructor: Robert Zakon''' Robert Zakon is a technology consultant and developer who has been programming web applications since the Web's infancy. In addition to developing web applications for web sites receiving millions of daily hits, he works with organizations in an interim CTO capacity, and advises corporations, non‐profits and government agencies on technology, information, and security architecture and infrastructure. Robert is a former Principal Engineer with MITRE's Information Security Center, CTO of an Internet consumer portal and application service provider, and Director of a university research lab. He is a Senior Member of the IEEE, and holds BS & MS degrees from Case Western Reserve University in Computer Engineering & Science with concentrations in Philosophy & Psychology. His interests are diverse and can be explored at www.Zakon.org where his vitae is available.

[[Category:AppSec_DC_2010_Training]] [[Category:Basic_Training]]] [[Category:Intermediate_Training]]]

← Older revision		Revision as of 21:24, 10 November 2014
Line 49:		Line 49:
	'''Instructor: Robert Zakon''' Robert Zakon is a technology consultant and developer who has been programming web applications since the Web's infancy. In addition to developing web applications for web sites receiving millions of daily hits, he works with organizations in an interim CTO capacity, and advises corporations, non‐profits and government agencies on technology, information, and security architecture and infrastructure. Robert is a former Principal Engineer with MITRE's Information Security Center, CTO of an Internet consumer portal and application service provider, and Director of a university research lab. He is a Senior Member of the IEEE, and holds BS & MS degrees from Case Western Reserve University in Computer Engineering & Science with concentrations in Philosophy & Psychology. His interests are diverse and can be explored at [http://www.Zakon.org www.Zakon.org] where his vitae is available.		'''Instructor: Robert Zakon''' Robert Zakon is a technology consultant and developer who has been programming web applications since the Web's infancy. In addition to developing web applications for web sites receiving millions of daily hits, he works with organizations in an interim CTO capacity, and advises corporations, non‐profits and government agencies on technology, information, and security architecture and infrastructure. Robert is a former Principal Engineer with MITRE's Information Security Center, CTO of an Internet consumer portal and application service provider, and Director of a university research lab. He is a Senior Member of the IEEE, and holds BS & MS degrees from Case Western Reserve University in Computer Engineering & Science with concentrations in Philosophy & Psychology. His interests are diverse and can be explored at [http://www.Zakon.org www.Zakon.org] where his vitae is available.

−	[[Category:OWASP/~~Training~~ AppSec_DC_2010]] [[Category:OWASP/~~Training~~ Basic]]	+	[[Category:OWASP Training/AppSec_DC_2010]] [[Category:OWASP Training/Basic]]

← Older revision		Revision as of 20:49, 10 November 2014
Line 49:		Line 49:
	'''Instructor: Robert Zakon''' Robert Zakon is a technology consultant and developer who has been programming web applications since the Web's infancy. In addition to developing web applications for web sites receiving millions of daily hits, he works with organizations in an interim CTO capacity, and advises corporations, non‐profits and government agencies on technology, information, and security architecture and infrastructure. Robert is a former Principal Engineer with MITRE's Information Security Center, CTO of an Internet consumer portal and application service provider, and Director of a university research lab. He is a Senior Member of the IEEE, and holds BS & MS degrees from Case Western Reserve University in Computer Engineering & Science with concentrations in Philosophy & Psychology. His interests are diverse and can be explored at [http://www.Zakon.org www.Zakon.org] where his vitae is available.		'''Instructor: Robert Zakon''' Robert Zakon is a technology consultant and developer who has been programming web applications since the Web's infancy. In addition to developing web applications for web sites receiving millions of daily hits, he works with organizations in an interim CTO capacity, and advises corporations, non‐profits and government agencies on technology, information, and security architecture and infrastructure. Robert is a former Principal Engineer with MITRE's Information Security Center, CTO of an Internet consumer portal and application service provider, and Director of a university research lab. He is a Senior Member of the IEEE, and holds BS & MS degrees from Case Western Reserve University in Computer Engineering & Science with concentrations in Philosophy & Psychology. His interests are diverse and can be explored at [http://www.Zakon.org www.Zakon.org] where his vitae is available.

−	[[Category:~~AppSec_DC_2010_Training~~]] [[Category:~~Basic_Training~~]]	+	[[Category:OWASP/Training AppSec_DC_2010]] [[Category:OWASP/Training Basic]]

← Older revision		Revision as of 18:05, 21 March 2012
Line 1:		Line 1:
−	[https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Training/WebAppSec:_Developing_Secure_Web_Applications~~\|OWASP~~ AppSec DC 2012]	+	[https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Training/WebAppSec:_Developing_Secure_Web_Applications AppSec DC 2012]

	AppSec USA 2011 - Course Sold out		AppSec USA 2011 - Course Sold out

← Older revision		Revision as of 18:04, 21 March 2012
Line 1:		Line 1:
		+	[https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Training/WebAppSec:_Developing_Secure_Web_Applications\|OWASP AppSec DC 2012]
		+
		+	AppSec USA 2011 - Course Sold out
		+
		+	AppSec DC 2010 - see below
		+
		+	----
		+
		+
	[[Image:468x60-banner-2010.gif\|link=http://www.owasp.org/index.php?title=OWASP_AppSec_DC_2010]]		[[Image:468x60-banner-2010.gif\|link=http://www.owasp.org/index.php?title=OWASP_AppSec_DC_2010]]

← Older revision		Revision as of 20:39, 5 October 2010
Line 23:		Line 23:

	:: ''"Handouts & presentation well organized & coordinated"''		:: ''"Handouts & presentation well organized & coordinated"''
		+
		+	All course registrants will receive printed materials and a certificate of completion which may be used for documenting CPE credits.

	==Student Requirements==		==Student Requirements==

@@ Line 9: / Line 9: @@
 Web applications are the new frontier of wide‐spread security breaches. This tutorial will guide through development practices to ensure the security and integrity of web applications, in turn protecting user data and the infrastructure the application runs on. Several attack types and risks will be reviewed (including OWASP’s Top 10), along with how the proper development practices can mitigate their damage. Although examples covered are PHP‐based, much of the content is also applicable to other languages.
 ==Student Requirements==
@@ Line 14: / Line 28: @@
 ==Objectives==
-Skill: Basic
+Skill: Any - some knowledge of web development will be helpful
 Attendees will gain the knowledge required to develop secure web applications, along with an understanding of various attack types against web apps and how they are mitigated by the proper coding techniques. The main learning objectives are:
 # Developing the skills for securely coding web applications
 # Reviewing existing web vulnerabilities and their impact
-# Understanding how the proper development techniques mitigates known and some unknown web
+# Understanding how the proper development techniques mitigates known and some unknown web vulnerabilities
 ==Instructor==
-'''Instructor: Robert Zakon''' Robert Zakon is a technology consultant and developer who has been programming web applications since the Web's infancy. In addition to developing web applications for web sites receiving millions of daily hits, he works with organizations in an interim CTO capacity, and advises corporations, non‐profits and government agencies on technology, information, and security architecture and infrastructure. Robert is a former Principal Engineer with MITRE's Information Security Center, CTO of an Internet consumer portal and application service provider, and Director of a university research lab. He is a Senior Member of the IEEE, and holds BS & MS degrees from Case Western Reserve University in Computer Engineering & Science with concentrations in Philosophy & Psychology. His interests are diverse and can be explored at www.Zakon.org where his vitae is available.
+'''Instructor: Robert Zakon''' Robert Zakon is a technology consultant and developer who has been programming web applications since the Web's infancy. In addition to developing web applications for web sites receiving millions of daily hits, he works with organizations in an interim CTO capacity, and advises corporations, non‐profits and government agencies on technology, information, and security architecture and infrastructure. Robert is a former Principal Engineer with MITRE's Information Security Center, CTO of an Internet consumer portal and application service provider, and Director of a university research lab. He is a Senior Member of the IEEE, and holds BS & MS degrees from Case Western Reserve University in Computer Engineering & Science with concentrations in Philosophy & Psychology. His interests are diverse and can be explored at [http://www.Zakon.org www.Zakon.org] where his vitae is available.
-[[Category:AppSec_DC_2010_Training]] [[Category:Basic_Training]]]
+[[Category:AppSec_DC_2010_Training]] [[Category:Basic_Training]]

← Older revision		Revision as of 05:06, 21 September 2010
Line 1:		Line 1:
		+	[[Image:468x60-banner-2010.gif\|link=http://www.owasp.org/index.php?title=OWASP_AppSec_DC_2010]]
		+
		+	[https://guest.cvent.com/EVENTS/Register/IdentityConfirmation.aspx?e=d52c6f5f-d568-4e16-b8e0-b5e2bf87ab3a Registration] \| [https://resweb.passkey.com/Resweb.do?mode=welcome_gi_new&groupID=2766908 Hotel] \| [http://www.dcconvention.com/ Walter E. Washington Convention Center]
		+	<br>
	__NOTOC__		__NOTOC__
	==Description==		==Description==

@@ Line 1: / Line 1: @@
 __NOTOC__
-===Description===
+==Description==
 '''Course Length: 1 Day'''
@@ Line 6: / Line 6: @@
 Web applications are the new frontier of wide‐spread security breaches. This tutorial will guide through development practices to ensure the security and integrity of web applications, in turn protecting user data and the infrastructure the application runs on. Several attack types and risks will be reviewed (including OWASP’s Top 10), along with how the proper development practices can mitigate their damage. Although examples covered are PHP‐based, much of the content is also applicable to other languages.
-===Requirements===
+==Student Requirements==
 None
-===Objectives===
+==Objectives==
 Skill: Basic
@@ Line 18: / Line 18: @@
 vulnerabilities
-===Instructor===
+==Instructor==
 '''Instructor: Robert Zakon''' Robert Zakon is a technology consultant and developer who has been programming web applications since the Web's infancy. In addition to developing web applications for web sites receiving millions of daily hits, he works with organizations in an interim CTO capacity, and advises corporations, non‐profits and government agencies on technology, information, and security architecture and infrastructure. Robert is a former Principal Engineer with MITRE's Information Security Center, CTO of an Internet consumer portal and application service provider, and Director of a university research lab. He is a Senior Member of the IEEE, and holds BS & MS degrees from Case Western Reserve University in Computer Engineering & Science with concentrations in Philosophy & Psychology. His interests are diverse and can be explored at www.Zakon.org where his vitae is available.
 [[Category:AppSec_DC_2010_Training]] [[Category:Basic_Training]]]