Description:
This 3-hour workshop covers essential web security concepts and trends for web developers. Learn secure coding and development techniques to improve your website’s security posture. The presentation includes working examples of Cross Site Scripting, SQL Injection, file inclusion, command injection and other attacks against a live web application. "Website Security Essentials for Developers" takes you step-by-step through the attacks and defenses.

Topics Include:

- Six ways you can be hacked

- Web application architectures

- Common website attack scenarios

- Finding vulnerabilities

- Fixing vulnerabilities

 - Secure Coding

- Data validation / sanitization techniques

- Best practices for securing web servers

- Live attack simulations

This course focuses on current web security strategies, secure coding best practices, data validation techniques, and attack mitigation. The course is taught using the LAMP environment (Linux, Apache, MySQL, PHP) while the concepts covered are platform independent.

Presented as a Lecture-Style Workshop:
Affordable workshops designed to introduce a subject quickly and efficiently. Students can take notes from the instructor's projected computer screen, and/or bring their own computer to follow along.

Who Should Take This:
Participants should be familiar with basic web development concepts. There are no technical prerequisites for this lecture-style workshop.

Instructor:
Steve has been active in website development since 1994, serving as designer, coder, programmer, and systems administrator. Past clients include eBay and Dell, along with some of the most creative small businesses online. His web development practice, Fox Web Technology, LLC, offers website penetration testing, vulnerability auditing, and security training services.

Steve's academic background includes a Master of Science degree in Information Systems Technology from George Washington University (Washington, DC), Bachelor's degree in Computer Science from University of Missouri (Columbia, MO), and a Certificate in Computer Programming from Montgomery College (Rockville, MD). Steve holds the CompTia Security+ certification, is a GIAC Certified Penetration Tester (GPEN) and has served as an event facilitator for the SANS security training institute.

BDA Member Cost: $50.00 ($60.00 after Wednesday, February 10, 2010)
Non Member Cost: $70.00 ($80.00 after Wednesday, February 10, 2010)
Become a member to save $20.00