OWASP: Top 10 Items A3, A2, & A1
OWASP
| Intermediate
- 12 videos | 42m 26s
- Includes Assessment
- Earns a Badge
In this 12-video course, learners will discover security aspects focusing on OWASP Top 10 2017 Item A3: Sensitive Data Exposure, Item A2: Broken Authentication and Item A1: Injection. Key concepts covered in this course include details about OWASP Top 10 2017 Item A3, sensitive data exposure, and how data are transmitted over networks; how to prevent sensitive data disclosure through mitigating and protecting; and how to enable BitLocker encryption for a web server disk volume. Next, learn details about OWASP Top 10 2017 Item A2, broken authentication, and learn how to secure authentication; observe how to enable multifactor authentication (MFA) for an Amazon Web Services user account; and learn how to retrieve sensitive data through password reset pages. Finally, learn details about OWASP Top 10 2017 Item A1, injection - how attackers feed malicious input to a web application; and how to validate user input before allowing submission for execution. The concluding exercise deals with how authentication can be hardened, how to list mitigations against SQL injection attacks, and how MFA enhances security.
WHAT YOU WILL LEARN
-
discover the subject areas covered in this course
describe OWASP Top 10 2017 item A3, sensitive data exposure
recognize how to prevent sensitive data disclosure
enable BitLocker encryption for a web server disk volume
describe OWASP Top 10 2017 item A2, broken authentication
recognize how to secure authentication -
enable MFA for an Amazon Web Services user account
retrieve sensitive data through password reset pages
describe OWASP Top 10 2017 item A1, injection
recognize how to validate user input before allowing submission for execution
inject SQL commands into a web form field
encrypt data at rest, secure authentication and prevent injection attacks
IN THIS COURSE
-
1m 57s
-
4m 37s
-
3. Mitigating Sensitive Data Exposure3m 44s
-
4. Protecting Sensitive Data at Rest4m 36s
-
5. A2 - Broken Authentication2m 51s
-
6. Mitigating Broken Authentication3m 12s
-
7. Multi-factor Authentication4m 5s
-
8. Exploiting Password Reset Pages2m 45s
-
9. A1 - Injection4m 5s
-
10. Mitigating Injections2m 19s
-
11. Executing a SQL Injection Attack3m 25s
-
12. Exercise: Protect Sensitive Data4m 51s
EARN A DIGITAL BADGE WHEN YOU COMPLETE THIS COURSE
Skillsoft is providing you the opportunity to earn a digital badge upon successful completion on some of our courses, which can be shared on any social network or business platform.
Digital badges are yours to keep, forever.
