Securing Java Web Applications

In Securing Java Web Applications, you will examine best practices for defensively coding JEE web applications, including XML processing and web services. You will repeatedly attack and then defend various assets associated with a fully functional web application. This hands-on approach drives home the mechanics of how to secure JEE web applications in the most practical of terms. This course is Java-specific but it may also be presented using .NET or other programming languages. You will learn sources for untrusted data as well as consequences for not properly handling untrusted data such as denial of service, cross-site scripting, and injections. You will test web applications with various attack techniques to determine the existence of and effectiveness of layered defenses and prevent and defend the many potential vulnerabilities associated with untrusted data. #gk1123