Web application security
Advanced Web Threats for Developers
Build on foundational web security knowledge through deeper vulnerability analysis, code review and repair exercises.
Ask ESI for a current quoteWhat you will learn
- Analyse more complex web vulnerabilities and attack scenarios.
- Identify and repair weaknesses in code samples.
- Apply mitigation techniques and integrate secure coding into everyday development.
Course topics
- Advanced SQL and NoSQL injection
- Advanced XSS and HTML-only injection
- Server-side request forgery and XML injection
- Advanced cross-site request forgery examples and labs
- OpenID and OAuth
- Integer security and secure coding fundamentals
Who it is for
Web developers, software engineers and architects, including developers of hybrid and web-based mobile applications.
Before you attend
ESI’s Top 10 Web Threats course or equivalent knowledge, a deep understanding of web technologies and strong programming skills. Bring a laptop with a modern browser; confirm the browser setup for exercises with ESI.
Practical learning
Live demonstrations, vulnerability exercises, code review and repair, and secure coding discussions.
Plan training for your team
Tell ESI which course interests you, your team’s experience, group size and preferred timing. We will confirm availability, delivery format, current syllabus, equipment requirements and pricing.
Request course informationCourse outline and indicative duration are based on ESI’s May 2024 Cybersecurity Trainings Portfolio, version 1.4. Current arrangements are confirmed with ESI; no scheduled dates or historical prices are offered here.