آموزش بالا بردن امنیت وب سایت ها

Learn to assess the security profile of your own web applications and identify security risks before attackers do. Frequently, the first thing a developer knows of a serious security flaw in their application is when it’s too late and it’s already been exploited. There’s a broad range of security risks and corresponding mitigations within web applications and it’s absolutely essential that developers learn how to identify these themselves. This course walks through a typical security review of an established web application and identifies which practices have been done well and then which ones could be improved. It’s a technology agnostic course – it doesn’t matter whether you work in ASP.NET or Node or PHP, this is all about the web and applies equally to all apps that run in the browser Secure Account Management 47:58 Introduction 0:58 About the App - "Falling Into the Pit of Success" 1:36 Account Management 3:14 Security in a Box... Not 2:43 HTTP: Start There and Stay There 0:44 Grading Your HTTPS Configuration 2:26 HTTP Strict Transport Security 4:06 Preventing Account Enumeration 6:59 Brute Force Attacks, Throttling, and Account Lockout 6:48 Third-party Identity Providers 0:53 Password Strength 2:08 Password Validation 4:34 Anti-automation (AKA Captcha) 5:22 Multiple Simultaneous Logins 4:41 Summary 0:39 Patterns of Good Web Security 54:26 The OWASP Top 10 5:06 Injection 4:36 Broken Authentication and Session Management 11:32 Cross-Site Scripting (XSS) 12:10 Insecure Direct Object References 4:53 Overlay Information Response Headers 3:33 X-Frame-Options 2:41 Cross-Site Request Forgery (CSRF) 4:23 Automated Security Scanning 4:00 Final Thoughts/Conclusion 1:27