Intermediate level · Module 3 of 6 · 16 guided hours
Web and Application Security Awareness
Understand common web application weaknesses and how to choose, configure and procure software securely.
Learning objectives
- Describe common web application risks using the OWASP Top 10
- Configure web services and SaaS tools securely
- Ask the right security questions when procuring software
Topics
- OWASP Top 10
- broken access control
- injection
- security misconfiguration
- secure SaaS settings
- vendor security questions
Lessons
-
Lesson 1 The OWASP Top 10
Learn the most common categories of web application security risk.
OWASPbroken access controlinjectioncryptographic failures
-
Lesson 2 Secure Configuration of Web and SaaS Tools
Configure websites and cloud services so defaults do not expose data.
security misconfigurationadmin accountssharing settingsupdates and plugins
-
Lesson 3 Security Questions for Software Procurement
Choose software and suppliers that will protect your data.
vendor assessmentdata location and ownershipMFA and loggingupdates and support
Practical activity
Review a provided small web application's documentation and configuration (not live testing), identify risks mapped to the OWASP Top 10 and recommend fixes and procurement questions.
Expected outcomes
- Informed conversations with developers and vendors
- Safer configuration of web tools
Assessment
Risk review mapped to OWASP categories, marked on accuracy and practicality.
Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.