Programming Foundations: Web Security
- Offered byLinkedin Learning
Programming Foundations: Web Security at Linkedin Learning Overview
Duration | 3 hours |
Total fee | ₹1,150 |
Mode of learning | Online |
Difficulty level | Beginner |
Credential | Certificate |
Programming Foundations: Web Security at Linkedin Learning Highlights
- Earn a sharable certificate
- 4 quizzes
- Access on tablet and phone
Programming Foundations: Web Security at Linkedin Learning Course details
- This course is essential for developers who want to secure their websites, and for anyone else who wants to learn more about web security
- Learn the eight fundamental principles that underlie all security efforts, the importance of filtering input and controlling output, and how to defend against the most common types of attack
Programming Foundations: Web Security at Linkedin Learning Curriculum
Introduction
The importance of security
Security Overview
What is security?
Why security matters
What is a hacker?
Threat models
Total security is unachievable
General Security Principles
Least privilege
Simple is more secure
Never trust users
Expect the unexpected
Defense in depth
Security through obscurity
Deny lists and allow lists
Map exposure points and data passageways
Filter Input, Control Output
Regulate requests
Validate input
Sanitize data
Label variables
Keep code private
Keep credentials private
Keep error messages vague
Smart logging
The Most Common Attacks
Types of credential attacks
Strong passwords
URL manipulation and insecure direct object reference (IDOR)
SQL injection
Cross-site scripting (XSS)
Cross-site request forgery (CSRF)
Cross-site request protections
Cookie visibility and theft
Session hijacking
Session fixation
Remote code execution
File upload abuse
Denial of service
Conclusion
Next steps