- Quick guide to the OWASP Top Ten and Application Security
- Free tutorial
- Rating: 4.6 out of 54.6 (44 ratings)
- 1,113 students
- 1hr 1min of on-demand video
- Created by Derek Fisher
English
What you’ll learn
- Awareness of what Application Security is and how it’s used
- Some historical context on Application Security
- Basic terms used in AppSec
- What a Secure SDLC and DevSecOps pipeline look like
- Quick view of OWASP and the OWASP Top Ten Web App vulnerabilities
Requirements
- Some programming experience
- Some familiarity with development practices
- Some familiarity with cybersecurity
Description
Every company uses software to function. Whether they are a Fortune 500 technology company or a sole proprietor landscaping company, software is integral to businesses large and small. Software provides a means to track employees, customers, inventory, and scheduling. Data moves from a myriad of systems, networks, and software providing insights to businesses looking to stay competitive. Some of that software used is built within the organization or it is purchased and integrated. What this means is that every organization, regardless of size and industry, has a software need. It enables organizations to move quickly and stay ahead of their competition.
This is where organizations need your help to secure their applications!
In this quick guide to application security and the OWASP Top Ten we will cover what is in the Top Ten. We’ll cover what makes them vulnerabilities and how to protect your application from attacks using these vulnerabilities. Well talk about cryptographic failures, insecure configuration, how to maintain software integrity, what injection attacks are and more!You’ll learn about the terms and security goals that are used in an organization. You’ll learn about some of the basic ways that application security can be brought into the development lifecycle both from a traditional pipeline and from a DevSecOps perspective. I hope you enjoy this brief but key course on AppSec.
Who this course is for:
- Software Developers
- Software Architects
- Quality Assurance Testers
Show less
Course content
4 sections • 15 lectures • 1h 1m total lengthCollapse all sections
Introduction1 lecture • 1min
- Introduction01:24
About Application Security3 lectures • 20min
- AppSec Terms04:46
- About AppSec12:48
- About OWASP02:49
OWASP Top Ten 202110 lectures • 36min
- Broken Access Controls08:03
- Cryptographic Failures04:42
- Injection03:25
- Insecure Design01:28
- Security Misconfiguration02:06
- Insecure Dependencies02:10
- Insecure Authentication05:04
- Software Integrity Failures03:42
- Logging and Monitoring Failures03:04
- Server-side Request Forgery02:22
Conclusion1 lecture • 3min
- Conclusion03:23
