Recent Web Attacks

1 Day Seminar

Syllabus

Seminar Description

Secure Programming is the last line of defense against attacks targeted toward our

systems. This course shows what happens when coding is done in an insecure manner

and when best practices and guidelines are not enforced correctly or at all.

In this course, we present several attacks that were published online regarding different

types of systems (for example, banks, forums and even US State Election Systems),

analyze them and explain what was exploited, how it was exploited and how could have

been prevented using the OWASP top 10 as guideline.

This seminar main objective is raising the awareness on the problems that might occur

without secure coding practices and by course completion, students should be more

aware of the security risks that are present in today's modern technologies and

websites.

Target Audience

Members of the software development team:

Developers Team leaders Testers / QA Designers & architects Managers

Prerequisites

Before attending this course, students should be familiar with:

Basic knowledge in information systems Background knowledge in networking, the internet and the World Wide Web

(WWW) Development background with internet applications, using at least one of those

languages: .NET, Java, PHP, ASP, C/C++

Recent Web Attacks

Seminar topics

Recent Web Attacks – What happened and how could it have been prevented

OWASP top 10 web application risks

Russia's Largest Portal Hacked; Nearly 100 Million Plaintext Passwords Leaked

New MySQL Zero Days - Hacking Website Databases

Two US State Election Systems Hacked to Steak Voter Databases - FBI Warns

Here's How Hackers Stole $80 Million from Bangladesh Bank

Turkish Hackers Used SQL Injection Flaw to Breach Qatar National Bank

EBay Under Fire After Cross Site Scripting Attack

324,000 Financial Records with CVV Numbers Stolen From A Payment Gateway

Flicker Cross-Site Request Forgery Vulnerability Patched

Epic's forums hacked again, with thousands of logins stolen

Yahoo vulnerability allows Hackers to delete 1.5 million records from Database

More!