Web Security

Secure Web Development Training
Class Name

Web Security

Web Security offers an introduction to the computer security concepts important to those who develop web applications or supervise those who do. Students will learn the basics of secure coding, prevention of buffer overflow attacks, secure database integration as well as relevant legal/privacy issues. The course is taught in a platform-independent manner so that students using any technology will benefit.
Outline
Week 1: Principles of Information Security
  • Explain the elements of the CIA Triad
  • Explain how the rule of least privilege applies to web security
  • Understand how common security devices may be combined to enhance security
  • Know the proper placement of web servers in various security scenarios
Week 2: Malicious Code and Other Nasties
  • Understand the risk posed by various malicious code objects
  • Design a comprehensive defense against those threats
  • Explain the special risks that denial of service and buffer overflow attacks pose to web applications
Week 3: Secure Web Development Practices
  • Perform parameter checking to protect against buffer overflow attacks
  • Implement change control processes to reduce risk
  • Design a strong logging/auditing policy
Week 4: Secure Database Integration
  • Explain the risks posed by inference and SQL injection attacks
  • Develop a defensive posture against those issues
  • Build web applications that securely integrate with back-end databases
Week 5: Introduction to Cryptography
  • Explain the difference between symmetric and asymmetric cryptography
  • Implement a secure website using HTTPS and SSL
  • Understand the issues surrounding web cryptography
Week 6: Privacy and Legal Issues
  • Understand the various laws and regulations that apply to websites
  • Write a privacy policy for your organization
  • Explain the impact of the Children's Online Privacy Protection Act
  • Understand the safe harbor provisions of the COPPA
Prerequisites
Basic understanding of web development techniques on any platform is a requirement. Basic familiarity with databases is desirable but not mandatory.
Requirements
This course has no specific software or hardware requirements.
Class Books
Course Price
  • Price: $80.00 US
[Register Now]

Additional Information:
This online course is limited to 100 participants. Your place in the course is confirmed by your payment. Introductory courses are intended for students with no experience in the subject matter and are seeking beginner level training.

Refund Policy: All Online Class fees are only refundable or creditable during the first week of class. A processing fee of five dollars ($5.00) will be charged for each refund request. If you have any questions please contact us

Additional Cost: Book and software migh be required for the course. Read the Requirements and Book section for more information. Course fee does not include the book and software cost .

Start Date: Click on the Register Now button to process to the registration page. You will see the start date of the class on that page. To get the start date of other courses, click on Open Class List link on the top navigation bar.

How eClasses Work:The classroom environment is based on Lundeen & Associates Web Crossing technology, a threaded messaging system. Instructors post lectures, reading selections, and hands-on assignments once a week in the online classroom. Students can discuss the assignments with the instructor and amongst themselves in the classroom area. This format has no set meeting time, which allows students to attend class at a time most convenient to them, yet still provides logically organized communication between class participants. Students can apply for the completion certificate after finishing the class. Web Study certificate is also available. Click on the Certificates link on the top navigation bar for more information.

 

Register Now

Before you register for this class, please read carefully the Outline, Prerequisites, Requirements, Books, and Refund Policy section.

Instructor: Mike Chapple
Mike Chapple Mike Chapple is a computer/network security expert with over six years of experience in the public and private sectors. He formerly served as an information security researcher with the National Security Agency developing cutting-edge network intrusion detection systems and as a computer security officer with the U.S. Air Force. He currently oversees enterprise-wide security initiatives as Chief Information Officer of the Brand Institute, a Miami-based marketing consultancy.

Mike is the author/co-author of three computer security books: the TICSA Training Guide from Que Publishing, the CISSP Study Guide from Sybex and the SANS GSEC Prep Guide from John Wiley & Sons.

Mike holds an M.S. in Computer Science with a concentration in Trusted and Secure Information Systems from the University of Idaho and a B.S. in Computer Science from the University of Notre Dame. His professional credentials include the CISSP, TICSA, CCSA, MCSE, MCDBA and CCNA certifications.


Cissp: Certified Information Systems Security Professional Study Guide book
4 Web Study Certificates

 Valid XHTML 1.0!  Valid CSS1!  Level Triple-A conformance icon, W3C-WAI Web Content Accessibility Guidelines 1.0

Other Topics of Our Web Training Program: