Web Security Fundamentals – Session 4

Session 4

This session focuses on protecting session integrity and securing cookies in modern web applications. You will learn how cookie attributes like HttpOnly, Secure, and SameSite help prevent common attacks. The session also explores how attackers attempt to hijack sessions and how to detect suspicious behavior. Techniques such as fingerprinting and multi-factor authentication are introduced to strengthen session security. By the end, participants will understand how to maintain secure user sessions in real-world environments.

Session #4
10 - Securing our cookies
11 - SameSite cookies
14 - Securing the session

Audience:
This course targets developers on all platforms, including .NET, Java, and PHP.

Prerequisites
You should have basic web development experience, including HTML, CSS and JavaScript. After the course, the participant can: After the course, the participant will have a thorough understanding of web security, capable of identifying and defending against common security threats such as XSS, CSRF, ensuring robust protection for web applications

The instructor Tore Nestenius is an independent software consultant and trainer based in Helsingborg, Sweden. For the last 10 years, he has been training developers all around the world in software architecture, web security, OpenID-connect, C#/.NET and domain-driven design. When he is not teaching, he is mentoring and coaching developer teams all around Europe.

This the last of 4 sessions.

You must register for each session separately.
The webinar will not be recorded and shared.

Link will be sent the day before the course.