90
Seminar on Web Technology, Security & Project Management PREPARED AND PRESENTED BY Nirjhor Anjum

Certified Scrum Accredited Master fileCAREER SUMMARY ★Involved in Programming since 1999, almost 20 years ★Worked as Technical Lead and Project Manager, almost 11 years ★Served

  • Upload
    others

  • View
    1

  • Download
    0

Embed Size (px)

Citation preview

Seminar onWeb Technology, Security & Project Management

PREPARED AND PRESENTED BY

Nirjhor Anjum

ABOUT SPEAKER________________________________________

CAREER SUMMARY

★ Involved in Programming since 1999, almost 20 years★ Worked as Technical Lead and Project Manager, almost 11 years★ Served 5 Multinational and 7 Local Companies in India and Bangladesh

★ Successfully Developed and Led 50+ Software projects and 200+ Web projects★ Experienced in 4 Programming Languages, 17 CMS, and 10 Web Frameworks

★ Achieved 33 International IT Certifications with 12 Professional Training★ Mentored 1200+ students in Software Development and Project Management★ Columnist on 1 English and 3 Bengali Daily Newspapers

CURRENT INDUSTRY INVOLVEMENT:★ Chief Analyst Officer (CAO), REVE Systems Limited (an CMMI DEV 3, ISO 9001:2015, ISO 27001 compliant company)

★ Faculty Head, PeopleNTech Institute of Information Technology (an ISO 9001:2015 compliant organization)

★ CEO, SuperbNexus Group★ Chairman, LandKnock Limited★ Managing Director, RMDG Global Limited

About Speaker - Career

INTERNATIONAL VENDOR CERTIFICATIONS- PRINCE2® Practitioner Certification (P2)- PRINCE2® Foundation Certification (P1)- ITIL® IT Service Management Certification (ITIL)- Certified Ethical Hacker (CEH)- Zend Certified Engineer (ZCE)- Microsoft Certified Solutions Developer (MCSD)- Microsoft Certified Solutions Associate (MCSA)- Microsoft Certified Professional (MCP)- Certified Entry Level Python Programmer (PCEP)- Cisco Certified Network Associate (CCNA)- Certified DevOps Project Manager™ (DevOps-PM)- Software Test Manager™ (ASTMC)- Accredited Project Manager™ (APRM)- Accredited Project Requirements Analyst™ (APRA)- Scrum Trainer Accredited Certification™ (STAC)- Scrum Master Accredited Certification™ (SMAC)- Agile Master Certified™ (SAMC)

About Speaker - Degrees and Certifications

- SCRUMstudy Certified Trainer™ (SCT)- Scrum Product Owner Certified™ (SPOC)- Scrum Master Certified™ (SMC)- Scrum Developer Certified™ (SDC)- Lean Six Sigma Black Belt Professional™ (LSSBB)- Lean Six Sigma Green Belt Professional™ (LSSGB)- Six Sigma Black Belt Professional™ (SSBB)- Six Sigma Green Belt Professional™ (SSGB)- Scrum Fundamental Certified™ (SFC)- Six Sigma Yellow Belt Professional™ (SSYB)- IBM Cloud Essentials (IBMCE)- IBM BlockChain Essentials (IBMBE)- Certified Digital Marketing Associate™ (SCDM-A)- Certified Marketing Research Associate™ (SCMR-A)- Certified Negotiation Associate™ (NCN-A)- Certified Corporate Sales Associate™ (SCCS-A)

EDUCATIONAL DEGREES:- Masters in Software Engineering (MSCS)- EMBA in Marketing (MBA)- Bachelor in Computer Information System (BSC CIS)- Diploma in Web Technology (Delhi)

PROFESSIONAL TRAINING (REMARKABLE ONLY):- Project Management Professional (PMP)- Java Spring Framework- Development in Java EE- ASP.NET C# and SQL Server

About Audience

TOPICS FOR TODAY’S SESSION________________________________________

WEB TECHNOLOGY

CYBER SECURITY

PROJECT MANAGEMENT

ORGANIZATIONAL BEHAVIOR

Topics to be discussed…

WEB TECHNOLOGY (PROGRAMMING CENTRIC)

________________________________________

About Web Technology - 1

If we make any project using these languages from scratch without help of any ready structure, it is known as Raw Coded Project and the pattern of programming is known as Coding from Scratch.

Raw Code

About Web Technology - 2

Different programmers make different libraries. Here the makers are known as Vendor.

Programming experts have combined libraries of different Vendors, followed design pattern and code writing standards and made a ready-made package on the top of which coders can make their projects; such packages are known as Framework.

Frameworks

About Web Technology - 3

Ready-made platforms that has login, registration, page creation, content management etc features ready specially for managing web contents are known as Content Management System i.e. CMS.

Content Management System (CMS)

About Web Technology - 4“UI/Web Designing” and “UX/Experience Designing”

X

Source: https://www.bls.gov

Understanding International Job Market - 1

Computer Occupation has Highest Employment Rate!

As per US Bureau of Labor Statistics report

Published for 2017-18

Physical Job, Global Perspective

Source: https://www.bls.gov

Understanding International Job Market - 2

Application/Software Engineer job is The largest employed Job in the market!

As per US Bureau of Labor Statistics report

Published for 2017-18

Physical Job, Global Perspective

Source: https://www.bls.gov

Understanding International Job Market - 3

It is Projected that, most Job OpeningWill be for Computer Occupations!

As per US Bureau of Labor Statistics report

Published for 2017-18

Physical Job, Global Perspective

Understanding International Job Market - 4Freelancing Job, Global Perspective

Source: https://upwork.com

In terms of Financial Figure, most jobs are available in Technology area!

As per UpWork new report

Published for 2016-2017

Understanding International Job Market - 5Freelancing Job, Global Perspective

Source: https://ilabour.oii.ox.ac.uk

Software Development is the area where highest job is done!

As per Online Labor Index report

Published for 2017-18

X

Understanding Local Job Market - 1Physical Job, Bangladesh Perspective

Understanding Local Job Market - 2Physical Job, Bangladesh Perspective

BDJobs Statistics

Understanding Local Job Market - 3Physical Job, USA Perspective

Understanding Local Job Market - 4Physical Job, Australia Perspective

X

Web Technologies Usage Statistics - 1Programming Language Usage Statistics / Web

PHP 79%ASP.Net 10.9%Java 3.8%Python 1.2%

As per W3Techs Statistics report

Published for 2018-19

Source: https://www.w3techs.com

Content Management System (CMS) Usage Statistics / Web

WordPress 34.6%Drupal 1.7%Magento 0.9%OpenCart 0.5%

As per W3Techs Statistics report

Published for 2018-19

Source: https://www.w3techs.com

Web Technologies Usage Statistics - 2

Framework Usage Statistics / Web

PHP Frameworks 41%ASP.NET Frameworks 28%Java Frameworks 8%

As per BuiltWith Statistics report

Published for 2018-19

Source: https://trends.builtwith.com

Web Technologies Usage Statistics - 3

X

An Analysis on Available Web Technologies - 1What is GOOD, what is BAD!

Source: https://www.w3techs.com

Questions!!!

What is the Best Technology to Learn?

Which one is Highest Paid Technology?

An Analysis on Available Web Technologies - 2Answer to :: What is the Best Technology to Learn?

What to Build? What to Use? (Priority is Sequenced)

Website, Blog, Classified Ads Site (Small-medium generally)

1. WordPress 2. Raw PHP3. Laravel or other PHP FW4. ASP.Net

Ecommerce Website (Small to Large)

1. WordPress / OpenCart / Magento2. Laravel or other PHP FW3. ASP.Net4. Java Spring or other JavaEE

Customized Web Project (Large generally)

1. Java Spring or other JavaEE2. ASP.Net3. Raw PHP with other Languages4. Laravel or other PHP FW

Application/Software(Small to Large)

1. Java Spring2. ASP.Net3. Raw PHP with other Languages4. Laravel or other PHP FW

Nothing is Bad! Each has their own Specialty!

An Analysis on Available Web Technologies - 3Answer to :: Which one is Highest Paid Technology?

What to Build? What to Use? (Priority is Sequenced)

Website, Blog, Classified Ads Site (Small-medium generally)

1. WordPress [BBC America Blog, TechCrunch Blog, SonyMusic]2. Raw PHP3. Laravel or other PHP FW4. ASP.Net

Ecommerce Website (Small to Large)

1. WordPress / OpenCart [ShadMart] / Magento [Aarong, Manish Malhotra, Pickaboo]2. Laravel or other PHP FW3. ASP.Net4. Java Spring or other JavaEE [Uniqlo]

Customized Web Project (Large generally)

1. Java Spring or other JavaEE 2. ASP.Net3. Raw PHP with other Languages [WikiPedia, Facebook]4. Laravel or other PHP FW [SourceForge]

Application/Software(Small to Large)

1. Java Spring [EkSheba, EkPay]2. ASP.Net [dSoft ERP]3. Raw PHP with other Languages [TechBeeo ERP, Mawara ERP, Pekhom ERP]4. Laravel or other PHP FW

Each has great earning Opportunity, depending on the Level/Quality of Work!

X

Guideline for your Decision Making

An Overview on Web Technology and its Market

Easy to Learn i.e. Best for Beginners!PHP Technology

Most Job Availability!PHP Technology > ASP.Net Technology > Java Technology

“The biggest ability of an engineer is adaptability. University teaches you grammar. You know algorithm, you know core syntax, you know how logics work.Now, through PROFSSIONAL TRAINING you can grab the skill,and can rock on any area of technology!”

X

UI/Web Designer Job Positions

Available Job Types in Web Technology - 1

Lead Web Designer

Web Design Specialist

Senior Web Designer

Web Designer

UX/Experience Designer Job Positions

Available Job Types in Web Technology - 2

Lead Designer

Design Specialist

Senior Designer

Designer

Web Developer Job Positions

Available Job Types in Web Technology - 3

Lead Web Developer

Analyst (Web Development)

Specialist (Web Development)

Senior Web Developer

Web Developer

Web Programmer

Associate Web Programmer

Software Engineer Job Positions

Available Job Types in Web Technology - 4

Lead Software Engineer

Software Analyst

Software Specialist

Senior Software Engineer

Software Engineer

Senior Programmer

Programmer

Associate Programmer

What else Job Positions are available there in Web Technology Market

Available Job Types in Web Technology - 5

Chief Solution Architect (Programming, Infrastructure, Network)

Solution Architect

Chief Technical Project Manager (Programming, Management, Negotiation)

Project Manager

Project Coordinator

Lead Tester (Programming, Testing)

Senior QA Test Engineer

QA Test Engineer

X

Guidelines to get Prepared

Steps to Get Prepared for the Job Market - 1

1. Set a targeted area that you are willing to get involved in profession.

2. Identify courses/lessons that are prerequisite to reach your target.

3. Set a professional lesson learning target timeline.

4. Get connected with relevant communities.

5. Do some small-medium projects in your leisure time rather than wasting it in amusement.

6. Prepare your Resume and Online Job Profiles.

7. Start submitting Job Applications everywhere!

REMARK: Never sacrifice your academic result…

Guidelines to get Prepared – Targeted Areas

Steps to Get Prepared for the Job Market - 2

There are following possible Areas (not limited to) that you may pick:

Web Engineer Web Developer CMS Developer Software Engineer

QA Test Engineer

Database Engineer Database Developer Database Administrator

Creative Graphics Designer UX Designer Digital Marketing Specialist

Cyber Security Engineer Security Specialist Security Auditor

Project Manager Project Coordinator Project Management Specialist

Guidelines to get Prepared – Targeted Areas – Web Engineer

Steps to Get Prepared for the Job Market - 3

“Web Engineer” in PHP Area

Professional Web Development Specialist (PWDS)Designing: HTML, CSS, BootstrapScripting: JavaScript, JSON, AJAX, jQueryDigital Marketing: Search Engine Optimization, Social Media MarketingDatabase: MySQLServer side Programming: PHP

Professional CMS Specialist (PCS)Web Content Management Systems: WordPressEcommerce Content Management Systems: OpenCart, Magento

Professional Software Specialist (PSS)Web Framework: Laravel

Zend Certified EngineerTopic: PHP

Guidelines to get Prepared – Targeted Areas – Web Engineer

Steps to Get Prepared for the Job Market - 4

“Web Engineer” in ASP.NET Area

ASP.Net Core ProfessionalDesigning: HTML, CSS, BootstrapScripting: JavaScript, JSON, AJAX, jQueryDatabase: MS SQL, SQL ServerServer side Programming: C#, Web Forms, MVC, CORE

Microsoft Certified Solutions Associate (MCSA)Topic: HTML, CSS, JavaScript

Microsoft Certified Solutions Developer (MCSD)Topic: ASP.Net MVC and Core

Guidelines to get Prepared – Targeted Areas – QA Test Engineer

Steps to Get Prepared for the Job Market - 5

“QA Test Engineer” Area

Quality Testing ProfessionalTopic: Manual Testing

Test Automation ProfessionalTopic: Selenium, jUnit, phpUnit etc…

Quality Software Development (QSD) CertificationTopic: C#, Java

ISTQB Certification on TestingTopic: Associate, Professional and more…

Guidelines to get Prepared – Targeted Areas – Database Engineer

Steps to Get Prepared for the Job Market - 6

“Database Engineer” Area

Oracle Certified Professional :: Database EngineerTopics:

- Oracle Database / SQL- Oracle Database / PL-SQL- Oracle Fusion Middleware / Form-Developer

Oracle Certified Professional :: Database AdministrationTopics:

- Oracle Database / SQL- Oracle Database Administration / Part 1- Oracle Database Administration / Part 2

Guidelines to get Prepared – Targeted Areas – Cyber Security Engineer

Steps to Get Prepared for the Job Market - 7

“Cyber Security Engineer” Area

Certified Ethical Hacking (CEH)Topics:

- All type of Security

EC-Council Certified Security Analyst (ECSA)Topics:

- Security Control and Management- Security Analysis and Auditing- Security Management

Guidelines to get Prepared – Targeted Areas – Project Manager

Steps to Get Prepared for the Job Market - 8

“Project Manager” Area

Agile Master CertifiedTopics:

- Agile Project Management

Scrum Master CertifiedTopics:

- Scrum Team, Role and Activities

PRINCE2 PractitionerTopics:

- PRINCE2 Standard based Project Management

PMPTopics:

- PMI Standard based Project Management

X

Confusions, and Understanding on Resume and CV

Guide to Prepare your Resume - 1

Guideline on Resume

Guide to Prepare your Resume - 2

Guidelines for your Resume

Don’t make it more than 4-5 Page

Don’t give so many contact numbers.

Don’t put an unprofessional photo with unprofessional background.

Don’t put email addresses like:– [email protected][email protected][email protected]

Don’t put following sections if the Job Circular doesn’t ask:– Religion– Blood Group– National ID No– Hobby– Pass-time– Extra Curricular Activity that doesn’t match with your Work area

Guideline on Resume

Guide to Prepare your Resume - 3

Guidelines for your Resume

The sequence should be– Objective– Career Summary– Professional Experience– Technology Skills– Employment Records– Professional Projects– Training and Certifications– Academic Degrees– Research Work– Personal Information– References

Guideline on Resume

Guide to Prepare your Resume - 4

Guidelines for your Resume

Don’t do grammatical mistakes.

Don’t write too much in the Job Responsibility. You will get scope to explain it.

Start with most important Projects and end with the less important one.

Don’t just copy paste the same Resume in all job.

If you are putting your research paper experiences, follow APA or any other standard.

Don’t make it so clumsy. Keep it clean and focused!

Guideline on Resume

Guide to Prepare your Resume - 5

Don’t feel fear to apply! But, never apply in wrong places…

X X

QUESTIONS?

CYBER SECURITY________________________________________

Definition

What is Cyber Security?

Security of Computer, Software, Hardware, Network and Infrastructure

X

SQL Injection

Different Threats in Web Security - 1

Injecting SQL Query through GET or POST Methods to Damage Database

SQL Injection Attack

Cross Site Scripting

Different Threats in Web Security - 2

Injecting Script in a Website that ultimately do bad in User’s Browser when user loads Website

Cross Site Scripting (XSS)

Cross Site Reference Forgery

Different Threats in Web Security - 3

Submitting Request from Unauthorized Source to Get Data or Alter Data or Do Bad Action

Cross Site Reference Forgery (CSRF) Attack

Brute Force Attack

Different Threats in Web Security - 4

Massive Request with Random Data to get Access to anything

Brute Force Attack

X

Security Measures

Security Measures to Protect Web Project - 1

Quality Web Hosting– Always up to date

– Backup provision

– Web Application Firewall (WAF) provision

– Get Virus Scanner, like ClamAV

SSL Certificate– Security through Data Encryption

Use CDN, like CloudFlare.com– A Layer in Internet Ecosystem

Security Measures

Security Measures to Protect Web Project - 2

Keep your Website up to Date

– Update your Code

– Update your Security Patches

Use Safe Library/Package

– Avoid Nulled or Cracked things

– Avoid Low Rated or Untested things

Security Measures

Security Measures to Protect Web Project - 3

Use Captcha in Login Forms

– Stay away from Brute-Force Attack

– Stay safe from Bot Attempts

Use Spam Protection Mechanism

– Use Akismet for CMS

– Use HoneyPot for Raw Coded Site

Security Measures

Security Measures to Protect Web Project - 4

Use Safer Password

– Make it using Alphabet, Letter, Symbol

– Make it Long

Hide the Admin Name / Path

– Don’t use default username “admin”

– Rename the Nick and Username of System Admin

https://site.com/s3cur3s1t3

Security Measures

Security Measures to Protect Web Project - 5

Do-not Store simple Password

– Avoid using just md5 or sha1

– Use Key and make Salt

Check before passing data in GET Method

– Never pass a data over GET that goes towards Database

Security Measures

Security Measures to Protect Web Project - 6

Use Token between Requesting Page and Request Receiving Page

– Use CSRF Token in Forms

X

Advanced Security Measures

Advanced Security Measures to Protect Web Project - 1

Restrict visiting Admin Panel by IP

# Block Access to Admin Directoryorder deny, allowallow from 172.0.0.1 deny from all

.htaccess

Advanced Security Measures

Advanced Security Measures to Protect Web Project - 2

Add an Extra Layer of Password Protection on Login Page using .htaccess

<Files wp-login.php>AuthUserFile ~/.htpasswdAuthName "Private Access"AuthType Basicrequire user MySecretUsername</Files>

MySecretUsername:$apr1$KW5IPd9r$/C4HkGhAX7WqaOrJ1k9my1

.htaccess .htpasswd

Hash Pass Generator: http://www.htaccesstools.com/htpasswd-generator/

Advanced Security Measures

Advanced Security Measures to Protect Web Project - 3

Disable Directory Listing

Options All -Indexes

.htaccess

Advanced Security Measures

Advanced Security Measures to Protect Web Project - 4

Restrict visiting WordPress Configuration File

# PROTECT CONFIG FILE<files web.config>Order deny, allowDeny from all</files>

.htaccess

Advanced Security Measures

Advanced Security Measures to Protect Web Project - 5

X

Restrict Execution of Server-side-Scripting Code in “Uploads” Directory

# Kill PHP EXECUTION

<Files ~ "\.ph(?:p[345]?|t|tml)$">deny from all

</Files>

.htaccess

Simple Mistakes

Simple Mistakes that may lead to Security Risk - 1

Never save your password on office/public Internet Browsers

Clean cache after doing your official activity

Never open unsafe/spam mails or mail attachments

Scan any internet file before opening

Simple Mistakes

Simple Mistakes that may lead to Security Risk - 2

Use 2FA for any Authentication Process, if available

X

Simple Mistakes

Simple Mistakes that may lead to Security Risk - 3

X

QUESTIONS?

PROJECT MANAGEMENT________________________________________

Not situation based decision making. No working software until the project ends. After test fixing big errors are expensive. Adopting complex change requirement is risky and expensive.

Waterfall Model

Traditional Project Management Approach - 1

Logical, but the problem is:

Not at all!!!

Waterfall is good when the project is so small like of 10-30 days.

Waterfall is good when it is required to define all functional requirements in the beginning. Like a module of FinTech System!

Waterfall Model

Traditional Project Management Approach - 2

Is Waterfall a DEPRECATED or OLD METHODOLOGY that we should never use?

So, what’s the best methodology in the market?

X

Agile has been practiced for over 15 years, with very rapid growth in the last 5 years

Growth driven in part by industry studies showing Agile can deliver major improvements in

Productivity, time-to-market, quality, and customer satisfaction.

Agile is now in use at most of the top companies, such as:

Growing adoption at the largest services companies and outsourcing firms worldwide

Microsoft

SAP

Walmart

GE Medical

HP

Cisco

Target

JPMorgan Chase

Agile Methodology

Project Management Approach Now a days - 1

1

1

1

2

2

2

2

4

4

7

9

65

0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100%

Agile UP

Agile Modeling

DSDM

XP

FDD

Lean

Other

Kanban

Don't Know

Scrumban

Custom Hybrid

Scrum

Source: Version One 7th “Annual State of Agile” Study

Scrum Framework

Project Management Approach Now a days - 2

X

Scrum in a Short View

Understanding Scrum - 1

30 days

24 hours

Product Backlog

As prioritized by Product Owner

Sprint Backlog

Backlog tasks

expanded

by team

Potentially Shippable

Product Increment

Daily Scrum

Meeting

Source: Adapted from Agile Software

Development with Scrum by Ken

Schwaber and Mike Beedle.

Scrum at a Glance

Understanding Scrum - 2

The Standard Scrum Team

Understanding Scrum - 3

We call all these people "Developers"

Scrum does not require every person to have all skills.

Responsible for implementing the product.

Recommended size is 5-9 people.

Team people will be cross-functional.

Understanding “Development Team”

Understanding Scrum - 4

ScrumMaster owns the 3 P: Process Coach

Problem Solver

Protector

ScrumMaster is the Servant Leader

Understanding “Scrum Master”

Understanding Scrum - 5

Understanding “Product Owner”

Understanding Scrum - 6

Product Owner - who ensures ROI and holds the goal of Stakeholder

Understanding “The Process”

Understanding Scrum - 7

Understanding “Backlog Development”

Understanding Scrum - 8

Backlog is the set of User-stories organized as per the Scrum Plan

Understanding “Scrum Board”

Understanding Scrum - 9

Scrum Board is the Board on which tasks are placed and moved towards completion.

Understanding “Scrum Events”

Understanding Scrum - 10

Scrum Events!

Team ACross-Functional

(Designers, Coders, Testers, etc.)

Team BCross-Functional

(Designers, Coders, Testers, etc.)

Team CCross-Functional

(Designers, Coders, Testers, etc.)

Team DCross-Functional

(Designers, Coders, Testers, etc.)

Team ECross-Functional

(Designers, Coders, Testers, etc.)

i Module 1

ii Module 2

iii Module 3

iv Module 4

v Module 5

Product Owner

Chief Product Owner

Product Owner Product Owner

Understanding “Scrum of Scrum Team”

Understanding Scrum - 11

X X

BONUS!!! CORPORATE CULTURE AND OUR MISTAKES________________________________________

The attitudes that we should have inside us

Interpersonal Skill

X

<

<

The better ways of communication

Communication Skill

X

Control your Emotion

Write mails in Professional Way

Way towards your leadership

Leadership Skill

X

Decision Making SkillProblem Solving Skill

QUESTIONS?

THANK YOU

PeopleNTech Institute of Information TechnologyBangladesh Campus

www.piit.us

____________________________

www.nirjhor.net