Applications Security

Catalog description

This course covers the very important area of application security providing useful examples of how security can be compromised in an application and what preventive measures should be taken from code development and deployment point of view. Topics covered include validation, cross-site scripting (XSS) and cross-site request forgery (CSRF), securely accessing databases and safeguarding against SQL injection attacks, encryption, hashing and preventing information leaks, methods for authenticating and authorizing users, including membership providers and preventing cookie theft, securing and locking down web server, ways to securely use web services, security with Ajax. Web API (Restful services) and MVC frameworks.