Topics

Basic Concepts

• The Discipline
• Definitions
• Web Applications
• HTTP Protocols
• Web Log
• Misconceptions

Offense

• Anatomy of Attacks
• Ethical Hacking Tools
• Introduction
• OWASP Top  10  (2007)
• OWASP Top  10 (2010)
• OWASP Top  10 (2013)
• WASC (V2.0)
• MS Threat Model
• One More Viewpoint
• An SQL Injection Model

Defense

• Defensive Mechanism
• Input Validation
• CAPTCHA
• Cryptography
• ASP.net Cryptography
• Identification
• Authentication
• Authorization
• Error Handling

SDLC

• Microsoft SDL
• Agile Development
• Best Practice
• SR Elicitation
• Static Analysis
• Dynamic Analysis

Code

• HTTP Header Injection
  
• Same Origin Policy
• Cross-Site Scripting
• Cross Site Request Forgery
• Database Security
• SQL Injection

Parameter

• State Management
• Direct Object Reference
• Directory Traversal
• Session Hijacking
• Session Fixation
• Parameter Cryptography

Web 2.0

• Web 2.0 Security
• Web Services Security
• AJAX Security
  
• Social Media Security