-
-
Cart
There are no items in your cart. Continue shopping on our Course Directory page.
SUBTOTALPay now -or- pay later
Pay by credit card at checkout
-or- pay later by invoice, as always.
-
Securing Web Applications, Services and Servers Training
Level: Intermediate
Rating:
4.77/5 Based on 139 Reviews
This Full Stack Cybersecurity Training for Web Apps and Services course provides in-depth, hands-on experience securing Web-based applications and the servers they run on. You will gain in-depth experience securing web services, and learn how to integrate robust security measures into the web application development process by adopting proven architectures and best practises.
This web service security course includes the OWASP top 10 most critical web application security risks and how to remediate them.
Key Features of this Securing Web Applications, Services and Servers Training:
- After-course instructor coaching benefit
- Learning Tree end-of-course exam included
- After-course computing sandbox included
You Will Learn How To:
- Implement and test secure web applications in your organisation
- Identify, diagnose, and remediate the OWASP top ten web application security risks
- Configure a web server to encrypt web traffic with HTTPS
- Protect Ajax-powered applications and prevent JSON data theft
- Secure XML web services with WS-Security
Certifications/Credits:
Choose the Training Solution That Best Fits Your Individual Needs or Organisational Goals
LIVE, INSTRUCTOR-LED
In Class & Live, Online Training
- 4-day instructor-led training course
- One-on-one after-course instructor coaching
- After-course computing sandbox
- Tuition fee can be paid later by invoice -OR- at the time of checkout by credit card
TRAINING AT YOUR SITE
Team Training
- Bring this or any training to your organisation
- Full - scale program development
- Delivered when, where, and how you want it
- Blended learning models
- Tailored content
- Expert team coaching
Customize Your Team Training Experience
CONTACT USSave More on Training with Learning Tree Training Vouchers!
Our flexible, easy-to-redeem training vouchers are available to any employee within your organisation. For details, please call 0800 282 353 or chat live.
In Class & Live, Online Training
Note: This course runs for 4 Days
-
15 - 18 Feb 9:00 AM - 4:30 PM GMT Online (AnyWare)
Reserve Your Seat -
1 - 4 Jun 9:00 AM - 4:30 PM BST Online (AnyWare)
Reserve Your Seat -
31 Aug - 3 Sep 9:00 AM - 4:30 PM BST Online (AnyWare)
Reserve Your Seat -
29 Nov - 2 Dec 9:00 AM - 4:30 PM GMT Online (AnyWare)
Reserve Your Seat -
9 - 12 Mar 2:00 PM - 9:30 PM GMT Online (AnyWare)
Reserve Your Seat -
22 - 25 Jun 2:00 PM - 9:30 PM BST New York / Online (AnyWare)
Reserve Your Seat -
7 - 10 Sep 2:00 PM - 9:30 PM BST Herndon, VA / Online (AnyWare)
Reserve Your Seat -
7 - 10 Dec 2:00 PM - 9:30 PM GMT New York / Online (AnyWare)
Reserve Your Seat
Guaranteed to Run
When you see the "Guaranteed to Run" icon next to a course event, you can rest assured that your course event — date, time — will run. Guaranteed.Securing Web Applications, Services and Servers Training Information
-
Recommended Experience
Basic knowledge of Web application operation and Web server administration are assumed. For example, you should have an understanding of Web browser/server operation, session management and basic HTML. In addition, experience with server-side Web application development and security knowledge is helpful.
Securing Web Applications, Services and Servers Training Outline
Setting the Stage
- Defining threats to your web assets
- Surveying the legal landscape and privacy issues
Establishing Security Fundamentals
Modelling web security
- Achieving Confidentiality, Integrity and Availability (CIA)
- Performing authentication and authorisation
Encrypting and hashing
- Distinguishing public– and private–key cryptography
- Verifying message integrity
Augmenting Web Server Security
Configuring security for HTTP services
- Managing software updates
- Restricting HTTP methods
Securing communication with SSL/TLS
- Obtaining and installing server certificates
- Enabling HTTPS on the web server
Detecting unauthorised modification of content
- Configuring permissions correctly
- Scanning for file–system changes
Implementing Web Application Security
Employing OWASP resources
- The Open Web Application Security Project (OWASP) top ten
- Remediating identified vulnerabilities
Securing database and application interaction
- Uncovering and preventing SQL injection
- Defending against an insecure direct object reference
Managing session authentication
- Protecting against session ID hijacking
- Blocking cross–site request forgery
Controlling information leakage
- Displaying sanitized error messages to the user
- Handling request and page faults
Performing input validation
- Establishing trust boundaries
- Removing the threat of Cross–Site Scripting (XSS)
- Exposing the dangers of client–side validation
- Implementing robust server–side input validation with regular expressions
Enhancing Ajax Security
Ajax features
- Identifying core Ajax components
- Exchanging information asynchronously
Assessing risks and evaluating threats
- Managing unpredictable interactions
- Exposing Ajax vulnerabilities
Securing XML Web Services
Diagnosing XML vulnerabilities
- Identifying nonterminated tags and field overflows
- Uncovering web service weaknesses
Protecting the SOAP message exchange
- Validating input with an XML schema
- Encrypting exchanges with HTTPS
- Implementing WS–Security with a framework
Scanning Applications for Weaknesses
Operating and configuring scanners
- Matching patterns to identify faults
- "Fuzzing" to discover new or unknown vulnerabilities
Detecting application flaws
- Scanning applications remotely
- Finding vulnerabilities in web applications with OWASP and third–party penetration testing tools
Best Practises for Web Security
Adopting standards
- Reducing risk by implementing proven architectures
- Handling personal and financial data
Managing network security
- Modelling threats to reduce risk
- Integrating applications with your network architecture
Team Training
Securing Web Applications, Services and Servers Training FAQs
-
What is web service security?
Applies security to web services. It is an extension to SOAP and a member of the web service specifications.
-
Can I learn web service security online?
Yes! We know your busy work schedule may prevent you from getting to one of our classrooms which is why we offer convenient online training to meet your needs wherever you want. This course is available in class and live online.
Your Training Comes with a 100% Satisfaction Guarantee!*
*Partner-delivered courses may have different terms that apply. Ask for details.