1. Course Introduction
Equip yourself to identify and address security risks, protect information & ensure online integrity.
Training Course
Understanding the OWASP® Top 10 Security Threats (SKF100)
Who Is It For
This course is designed for anyone whose career will benefit from an increased understanding of web vulnerabilities, including new career pros and business professionals.
read less
read more
What You’ll Learn
By the end of this course, participants will acquire a comprehensive understanding of the OWASP Top 10 Security Threats, empowering them to identify and mitigate vulnerabilities, understand exploitation techniques, and apply risk management for web app security.
read less
read more
What It Prepares You For
This course prepares you to build a strong foundation for roles like analysts, testers, and consultants. Upon completing this course, you will be equipped with the knowledge and skills to identify and mitigate web application vulnerabilities including: risk assessment, advanced exploitation techniques, and secure coding practices.
read less
read more
1. Course Introduction
2. Introduction to Web Application Security
3. Broken Access Controls
4. Cryptographic Failures
5. Injection
6. Insecure Design
7. Security Misconfiguration
8. Vulnerable and Outdated Components
9. Identification and Authentication Failures
10. Software and Data Integrity Failures
11. Security Logging and Monitoring Failures
12. Server-Side Request Forgery (SSRF)
Prerequisites
- Basic Knowledge of Web Technologies: You should have a fundamental understanding of web technologies such as HTML, CSS, JavaScript, and server-side scripting languages. This knowledge will provide a foundation for understanding web application security concepts.
- Familiarity with Web Application Architecture: A basic understanding of how web applications are structured and function is essential. You should be familiar with concepts such as client-server architecture, HTTP protocols, and how data is transmitted between the client and server.
- Basic Programming Skills: While not mandatory, basic programming skills would be beneficial. Familiarity with a programming language such as Python, Java, or JavaScript will enable you to better grasp the technical aspects of web application vulnerabilities and their exploitation.
- General Cybersecurity Awareness: You should have a basic understanding of cybersecurity principles, including concepts such as confidentiality, integrity, and availability. Familiarity with common security terms and practices will aid in comprehending the importance of web application security.
While prior experience in web application security or cybersecurity is not a prerequisite, having a solid foundation in the above areas will help you engage with the course content more effectively and grasp the core concepts of the OWASP Top 10 vulnerabilities and their exploitation.
The OWASP® Word Mark is a registered or unregistered service mark of OWASP Foundation, Inc. in the United States and other countries. All rights reserved. Unauthorized use strictly prohibited. For more information about the OWASP Foundation, please see owasp.org.
Lab Info
- Reliable Internet Connection: A strong and stable Internet connection is required for optimal learning and interaction during the labs. We recommend a broadband connection with a minimum speed of 10 Mbps for the best experience.
- Up-to-Date Browser: For seamless access to all course materials, please ensure you’re using a modern, up-to-date web browser. Google Chrome, Mozilla Firefox, Microsoft Edge, or Safari are recommended. Ensure your browser is updated to the latest version to avoid compatibility issues.
- JavaScript Enabled: As our labs may require interactive components, make sure JavaScript is enabled in your browser settings.
- Pop-Up Blocker Disabled: Certain aspects of the lab may open in new windows or tabs, so disabling pop-up blockers for the course website is advised.
- Screen Resolution: A minimum screen resolution of 1024×768 for the best viewing and interaction with the course content.
Jun 2024
The focus this course placed on real-world, experiential learning and understandable explanations, was what I found most appealing. In addition to covering theoretical ideas, the training offered chances to apply them in practical settings. I was able to acquire useful abilities and insights from this hands-on method that I could use right away. The easy-to-understand explanations also made it easier for me to understand difficult concepts, which made learning pleasurable.
May 2024
Awesome examples, and practical samples. It enforces learning about security by showing vulnerabilities explicitly.
Mar 2024
It was a really nice deep dive into security for me as a beginner.
Mar 2024
Well-explained content, and interactive labs.
Mar 2024
This course explained the top 10 risks in web applications very well. As a software developer, those fundamentals were really helpful.
Feb 2024
Having labs as the main material to drive learning. I've seen quite a few Top Ten learning courseware, and most don't take advantage of the power that doing has over reading.
Feb 2024
A well-crafted, updated, and comprehensive view of the most current OWASP Top Ten.
Jan 2024
It covered the OWASP well!
Jan 2024
Exactly the level and amount of information needed. Lab exercises via dockers on local machines are a joy to explore and do while learning.
Jan 2024
IMHO, the assignments were awesome for the target topics. As much hand-holding as needed, while at the same time enough challenge for the students.
Jan 2024
Excellent content, examples, and lab exercises.
Sep 2023
Simple and objective.
Sep 2023
The Concepts are very useful.
$0
Login Using My Portal Before Enrolling
Online, Self Paced
12 Hours of Course Material
12 Months of Access to Online Course
Digital Badge
Discussion Forums
