№ files_lp_3_process_9_34245
This document outlines a comprehensive syllabus for a course on web application security, focusing on offensive security practices and the critical vulnerabilities identified by OWASP.
Year: 2020
Region / City: Global
Subject: Web Application Security
Document Type: Course Syllabus
Author: Andrew Hoffman, Malcolm McDonald, Simone Onofri, Donato Onofri, Matteo Meucci, Colin Watson, Tin Zaw
Target Audience: Students of cybersecurity
Effective Date: 2020
Date of Last Revision: 2023
Prerequisites: COSC 312, CYBR 310
Note: Course Learning Outcomes
A1: Demonstrate critical knowledge of the specialized concept and theories related to web application vulnerabilities, exploits and their mitigation.
A2: Apply specialized methods, tools and standards to detect and mitigate the sophisticated web application threats.
B1: Analyze the core web application vulnerabilities to identify the security requirements in formulating specialist web application security solution.
B2: Design specialist counter strategies to overcome the critical web application attacks.
B3: Exhibit the specialist skills of expressing and communicating web application security compliance effectively in written and oral forms.
C1: Demonstrate effective teamwork and collaboration skills in the context of web application security, working collaboratively to diagnose and resolve potential web application vulnerabilities.
Malcolm McDonald, “Web Security Basics For Developers: Real Threats, Practical Defense”, illustrated (2020), No Starch Press, ISBN: 978-1593279943.
Simone Onofri, Donato Onofri, Matteo Meucci, “Attacking and Exploiting Modern Web Applications: Discover the mindset, techniques, and tools to perform modern web attacks and exploitation”, (2023), Packt Publishing, ISBN: 978-1801816298.
Colin Watson and Tin Zaw, “OWASP Automated Threat Handbook: Web Applications”, Version 1.2 (2018), OWASP Foundation, ISBN: 978-1-329-42709-9.
OWASP A04: 2021 – Insecure Web Application Design
OWASP A05: 2021 – Security Misconfiguration
OWASP A07: 2021 – Identification and Authentication Failure
OWASP A01: 2021 – Broken Access Control
OWASP A02: 2021 – Sensitive Data Exposure
OWASP A03: 2021 – Injections
OWASP A08: 2021– Insecure Deserialization
OWASP A09: 2021 – Insufficient Logging and Monitoring
OWASP A10: 2021 – Server-Side Request Forgery (SSRF)
Price: 8 / 10 USD
The file will be delivered to the email address provided at checkout within 12 hours.

Don’t have cryptocurrency yet?

You can still complete your purchase in a few minutes:
  1. Buy Crypto in a trusted app (Coinbase, Kraken, Cash App or any similar service).
  2. In the app, tap Send.
  3. Select network, paste our wallet address.
  4. Send the exact amount shown above.
After sending, paste your TXID (transaction ID) and your email to receive the download link. Need help? Contact support and we’ll guide you step by step.