Web Security
Web Security is a practical course designed to help trainees understand how modern web attacks happen and how to protect websites and web applications. This course focuses on the most common vulnerabilities used by attackers and the security best practices developers must follow.
Trainees will learn how to identify web security risks such as weak authentication, insecure inputs, session issues, and misconfigurations. You will also practice applying secure coding and security checks to reduce risk in real-world websites.
Learning format: This course does not require live class attendance. Course content unlocks weekly by topics, allowing trainees to study tutorials on their own schedule. Unlocked topics include assignments or projects that must be completed and submitted before their deadlines. The instructor provides weekly announcements, feedback, and reminders outlining the topics and tasks to be completed for that week.
- Introduction to web security
- Authentication and access control
- Input validation and injection attacks
- Cross site scripting and web risks
- Sessions, cookies, and secure headers
- Secure APIs and common API issues
- Security testing basics
- Security monitoring and incident response
- Deployment security and best practices
- Deployment & Capstone Project
Course window: Classes start at a specific time and end at a specific time.
Study format: Tutorials are self-paced and can be completed at any time during the course window.
Weekly structure: New topics unlock each week. Trainees must study the released topics and complete the associated tutorials.
Deadlines: Assignments and projects related to each topic must be submitted before their weekly and final deadlines.
Instructor support: Weekly announcements and reminders are posted to guide trainees on topics and required tasks for each week.