Web Security Fundamentals – Sessions 2

Session 2
This session focuses on securing communication through certificates and understanding trust on the web. Participants will learn how certificate authorities work, how certificates are managed, and how to avoid common pitfalls. The session then dives into Cross Site Scripting, one of the most common and dangerous web vulnerabilities. Through practical examples, you will see how XSS attacks are performed and how improper input handling leads to exploitation. The session emphasizes defensive techniques such as proper data sanitization and output encoding.

Session #2
4 - Certificates
5 - XSS - Part 1
6 - XSS - Part 2

Briefly about the teaching: Today’s internet is a very rough place, with robots, spies, states, hackers, and other evil entities constantly roaming around the web looking for vulnerable web applications to attack. Because of this, it is very important that every developer has the necessary skills to protect their applications. In this hands-on course, you will learn the fundamentals of how the web works, how to protect your applications, and how attacks are performed. It goes beyond the OWASP TOP-10 and gives you many concrete examples of how to fail and how to protect your applications.

Audience:
This course targets developers on all platforms, including .NET, Java, and PHP.

Prerequisites
You should have basic web development experience, including HTML, CSS and JavaScript. After the course, the participant can: After the course, the participant will have a thorough understanding of web security, capable of identifying and defending against common security threats such as XSS, CSRF, ensuring robust protection for web applications

Instructor Tore Nestenius is an independent software consultant and trainer based in Helsingborg, Sweden. For the last 10 years, he has been training developers all around the world in software architecture, web security, OpenID-connect, C#/.NET and domain-driven design. When he is not teaching, he is mentoring and coaching developer teams all around Europe.

• You must register for each session separately.
• The webinar will not be recorded and shared.
• Link will be sent the day before the course