Application Security Best Practices

Target: Developers QA & Application Security Professionals
Length: 2 Days
Focus: Application Weaknesses, Development Flaws, and Remediation Strategies

Format: Lab & Lecture

Content:

Application Attacks

  • Execution of the following attacks on web interfaces
  • Cross-site scripting
  • Code Injection
  • Session Hijacking
  • Enumeration of network and device settings
  • Enumeration of web server type, either Apache or propriety, and CLI management methods
  • Denial of Service attacks
  • Responsible disclosure doctrines and practices

Binary Analysis

  • Binary analysis with hex editor and an introduction to forensics tools
  • Binary examination, disassembly, and modification
  • Run-time debugging and reverse engineering