OWASP Top 10: A04:2021-Insecure Design

OWASP 2022    |    Intermediate
  • 8 videos | 38m 22s
  • Includes Assessment
  • Earns a Badge
Today's web applications combine software code and resultant data, with the trustworthiness of both resulting in a secure trusted application. There are many planning strategies and tools that can ensure software and data integrity. In this course, explore IT supply chain security, how to deploy Linux updates, and how to configure a Windows Server Update Services (WSUS) host. Next, examine object-oriented programming (OOP) and how it is related to insecure deserialization attacks. Finally, learn how to use the OWASP Dependency-Check tool to verify that publicly disclosed vulnerabilities are not present in a project's dependencies. Upon completion, you'll be able to ensure that the design of a web application includes business requirements and related security controls.

WHAT YOU WILL LEARN

  • Discover the key concepts covered in this course
    Outline how confidentiality, integrity, and availability (cia) apply to web app development
    State how security applies to each phase of the software development life cycle (sdlc)
    Identify detailed security controls listed in the cloud controls matrix (ccm)
  • Name various types of software testing
    Configure web application deployment slots in the microsoft azure cloud
    List the benefits of using a secure api when writing web app code
    Summarize the key concepts covered in this course

IN THIS COURSE

  • 1m 6s
  • 6m 42s
  • Locked
    3.  Software Development Life Cycle Security Controls
    8m 6s
  • Locked
    4.  Security Controls in the Cloud Controls Matrix (CCM)
    4m 32s
  • Locked
    5.  Software Testing Types
    5m 53s
  • Locked
    6.  Configuring Web Application Deployment Slots
    5m 51s
  • Locked
    7.  The OWASP Enterprise Security API (ESAPI)
    5m 24s
  • Locked
    8.  Course Summary
    50s

EARN A DIGITAL BADGE WHEN YOU COMPLETE THIS COURSE

Skillsoft is providing you the opportunity to earn a digital badge upon successful completion on some of our courses, which can be shared on any social network or business platform.

Digital badges are yours to keep, forever.

YOU MIGHT ALSO LIKE

Course OWASP Top 10: A1 - Injection
Course OWASP Top 10: A05:2021-Security Misconfiguration
Course OWASP Top 10: A06:2021-Vulnerable & Outdated Components

PEOPLE WHO VIEWED THIS ALSO VIEWED THESE

Course OWASP Top 10: Securing Web Applications
Course OWASP Top 10: A05:2021-Security Misconfiguration
Course OWASP Top 10: A10:2021-Server-Side Request Forgery (SSRF)