The OWASP Top Ten Proactive Controls 2018

Software developers are the foundation of any application. As software developers author code that makes up a web application, they need to embrace and practice a wide variety of secure coding techniques. The OWASP Top Ten Proactive Controls (2018) is an OWASP documentation project that lists critical security techniques that should be included in every software development project. This document was written by developers for developers to assist those new to secure software development.
..more
1) Define Security Requirements
2) Leverage Security Frameworks and Libraries
3) Secure Database Access
4) Encode and Escape Data
5) Validate All Inputs
6) Implement Digital Identity
7) Enforce Access Controls
8) Protect Data Everywhere
9) Handle All Errors and Exceptions

Building Secure API's and Web Applications

The major cause of webservice and web application insecurity is- lack of secure software development knowledge and practices. This highly intensive and interactive workshop provides essential application security training for web application and webservice developers.
This workshop is a combination of lecture, security testing demonstration and code review. Students will learn the most common threats against applications. More importantly, students will learn how to code secure web solutions via defense-based code samples.
..more
As part of this workshop, we will explore the use of third-party security libraries and frameworks to speed and standardize secure development. We will highlight production quality and scalable controls from various languages and frameworks. This course will include secure coding information for Java, PHP, Python, Javascript and .NET programmers, but any software developer building web applications and webservices will benefit.

Topics will include:
- Introduction to Application Security
- HTTP Security Basics
- XSS Defense
- Intro to Angular.JS Security
- Intro to React.JS Security
- SQL and other Injection
- Cross Site Request Forgery
- Input Validation Basics
- OWASP Top Ten 2017
- Introduction to API and Microservice Security

Requirements: Familiarity with the technical details of building web applications and web services from a software engineering point of view.