Web application security
Top 10 Web Threats for QA Specialists
Learn to detect, analyse and triage web security defects, with a focus on testing tools and practical investigation.
Ask ESI for a current quoteWhat you will learn
- Recognise common web threats and how they appear in applications.
- Identify and triage security-specific defects.
- Use detection tools and testing tactics in practical exercises.
Course topics
- Network and cryptography basics
- Injection, XSS and XXE
- Authentication, access control and sensitive data exposure
- Security misconfiguration and insecure deserialisation
- Vulnerable components, logging, monitoring and denial of service
- Security defect detection, analysis and development process practices
Who it is for
Junior and senior QA specialists who want to develop practical web security testing skills.
Before you attend
A good understanding of web technologies and working experience with web development. Bring a laptop with a modern browser.
Practical learning
Attack demonstrations, vulnerability exercises and detection tools. The portfolio includes one week of post-course online exercise access; confirm arrangements with ESI.
Plan training for your team
Tell ESI which course interests you, your team’s experience, group size and preferred timing. We will confirm availability, delivery format, current syllabus, equipment requirements and pricing.
Request course informationCourse outline and indicative duration are based on ESI’s May 2024 Cybersecurity Trainings Portfolio, version 1.4. Current arrangements are confirmed with ESI; no scheduled dates or historical prices are offered here.