November 16 and 17, 2010: ITACS-Course "Web Application Security: Basic"

Learning targets: The participants know the OWASP Top 10 weaknesses and counter measures. For each attack such as SQL injection, XSS, XSRF or authorisation bypass there is a theoretical and a lab exercise. In addition, the ability for self-assessment and the main basics of HTTP/HTTPS are trained.
Event date: November 16, 2010 9:15 AM to November 17, 2010 5:15 PM

Please note: This course is hold in German. For courses in English, please contact Compass Security directly: Telefon +41 55 214 41 60 or team@csnc.ch

The following course is offered in co-operation with ISACA and the ITACS Training AG in Zurich. Further information is available for you on www.itacs.ch where you may also enrol for this course.

 Target group:
- Security Officers
- Web developers

Requirements:
- Familiarity with the Windows command line
- Knowledge of the HTTP protocol
- Programming skills is an advantage

Contents:
- Introduction OWASP TOP 10
- Theory and exercises on A1 to A10 of the OWASP table
- Tools and methods for self-assessment
- Discussion on defence measures / priorities

Scope:
The course is focussed on the Web layer. Nessus, Nmap and vulnerability scanning are not part of this course (these topics are dealt with in the course LAP-NP). Furthermore, the course is the foundation for the LAB-WAA with the topics Web 2.0, Advanced JavaScript, Google Web Toolkit, etc.


Event location:  ITACS Training AG
Stampfenbachstrasse 40
8006 Zürich
Phone: +41 (0)44 444 11 01
Fax: +41 (0)44 444 11 02
Email: kurse@itacs.ch
Link: Location

Further links:

News

HTML5 Web Security
12/7/11 - HTML5 Security Research Report

Review BlackHat / Defcon 2011
11/8/11 - This year, as every year, two security analysts of Compass Security AG participated in the BlackHat and Defcon in Las Vegas.

Oracle RDC Onsite XSS Vulnerability
10/18/11 - Compass Security has found a vulnerability in ORACLE RDC ONSITE.

Course Schedule - New iPhone & iPad Hands-On course
10/6/11 - The new iPhone & iPad Compass course will be held in Switzerland for the first time

it-sa 2011: Compass Live-Hacking at IT-SA 2011 in Nürnberg
9/29/11 - Meet Compass at IT-SA Messestand in Halle 12, Stand 226. We will present Live-Hackign with newest iPhone and Mobile Devices.