Security Awareness for Developers

What to Expect?

Vulnerabilities in self-developed software programs are often the way for hackers to penetrate a company network. Using OWASP 10, we will show what attack techniques hackers use and how they can exploit vulnerable code.

Results

After this session, developers will understand how to easily fend off hackers by developing secure code without security holes, following the principle of "security by design".

Target audience

The training is delivered in a simple and understandable way by experienced ethical hackers. Even junior software developers can easily follow the session. Security Awareness for Developers is an interactive training course.

Topics

• Injection
• Broken Authentication and Session Management
• Cross-Site Scripting (XSS)
• Insecure Direct Object Reference
• Security Misconfiguration
• Sensitive Data Exposure
• Missing Function Level Access Control
• Cross-Site Request Forgery (CSRF)
• Using Components with Known Vulnerabilities
• Unvalidated Redirects and Forwards

Frameworks and programming languages

• .NET
• PHP
• Laravel
• Symfony
• C#
• Java
• Python
• Node
• JBoss
• Middleware
• AWS cloud
• ...