OWASP: Top 10 Items A9, A8, & A7
OWASP
| Intermediate
- 11 videos | 37m 51s
- Includes Assessment
- Earns a Badge
In this 11-video course, learners will discover security aspects focusing on OWASP Top 10 2017 Item A9: Using Components with Known Vulnerabilities; Item A8: Insecure Deserialization; and Item A7: Cross-Site Scripting (XSS). Key concepts covered in this course include details about OWASP Top 10 2017 Item A9, dealing with known vulnerabilities, and examining different types of common vulnerabilities; and details about OWASP Top 10 2017 Item A8, which involves insecure deserialization and transmission of objects between network hosts programmatically, or storage of an object in a file, such as storing something in a web browser cookie. Next, learn how insecure deserialization can be mitigated by treating it as user input; learn how to secure traffic by encrypting it with IPSec to protect serialized data; and learn details about OWASP Top 10 2017 Item A7 relating to XSS and how XSS can be mitigated. Finally, you will learn to perform a fuzz test by using OWASP ZAP; and how to identify insecure components, serialization, and XSS.
WHAT YOU WILL LEARN
-
describe OWASP Top 10 2017 item A9 dealing with known vulnerabilities
review different types of vulnerabilities
purchase merchandise at an unauthorized discount
describe OWASP Top 10 2017 item A8 which involves insecure deserialization
recognize how insecure deserialization can be mitigated by treating it as user input -
secure traffic by encrypting it with IPSec to protect serialized data
describe OWASP Top 10 2017 item A7 relating to cross-site scripting (XSS)
recognize how cross-site scripting can be mitigated
perform a fuzz test using OWASP ZAP
identify insecure components, serialization, and XSS
IN THIS COURSE
-
1m 42s
-
4m 20s
-
3. Mitigating Known Component Vulnerabilities3m 45s
-
4. Protecting Sensitive Data at Rest2m 19s
-
5. A8 - Insecure Deserialization3m 19s
-
6. Mitigating Insecure Deserialization2m 49s
-
7. IPSec Encapsulating Security Payload4m 24s
-
8. A7 - Cross-Site Scripting (XSS)4m 21s
-
9. Mitigating Cross-Site Scripting3m 36s
-
10. Mitigating Injections4m 39s
-
11. Exercise: Harden Web App Components and Inputs2m 37s
EARN A DIGITAL BADGE WHEN YOU COMPLETE THIS COURSE
Skillsoft is providing you the opportunity to earn a digital badge upon successful completion on some of our courses, which can be shared on any social network or business platform.
Digital badges are yours to keep, forever.
