Technologies for Web and E-Commerce Application Security

Catalog description

This course provides an overview of techniques to assess and ensure the security of web applications and services that drive modern e-commerce transactions. The course first presents foundational knowledge of security technologies, web servers, web applications, and web services. Building on this foundational knowledge, various code review and testing techniques to identify and evaluate vulnerabilities in web applications, web services, and databases are covered through comprehensive hands-on exercises. Besides, the best practices to prevent common flaws, misconfigurations, and vulnerabilities in web applications and services are discussed. The course emphasizes threat modeling as a critical security evaluation approach of web applications and services.