Implementing a secure networked application can be challenging, even for developers who have prior experience with cryptographic building blocks such as encryption and digital signatures. To help participants grasp the role and application of these cryptographic primitives, the course begins by establishing a solid foundation on the core requirements of secure communication: integrity, confidentiality, remote identification, anonymity, and secure acknowledgment. It also addresses common threats that undermine these requirements alongside real-world solutions.
Given that cryptography is a critical aspect of network security, the most important algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement are discussed. Rather than delving into complex mathematical theories, these concepts are presented from a developer's perspective, highlighting typical use-case examples and practical considerations such as public key infrastructures (PKI). Additionally, security protocols used in secure communication are introduced, with an in-depth look at widely-used protocol families like IPSEC and SSL/TLS.
Common cryptographic vulnerabilities are explored, covering both specific algorithms and protocols. Examples include BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding Oracle, Lucky Thirteen, POODLE, and RSA timing attacks. For each issue, the practical implications and potential consequences are outlined without requiring deep mathematical expertise.
Finally, since XML technology is central to data exchange in networked applications, its security aspects are thoroughly described. This includes using XML within web services and SOAP messages, along with protection mechanisms like XML Signature and XML Encryption. The discussion also covers weaknesses in these protections and XML-specific security issues such as XML injection, XML external entity (XXE) attacks, XML bombs, and XPath injection.
Participants attending this course will
- Understand the fundamental concepts of security, IT security, and secure coding
- Comprehend the requirements for secure communication
- Learn about network attacks and defenses across various OSI layers
- Gain a practical understanding of cryptography
- Understand essential security protocols
- Recognize recent attacks against cryptosystems
- Receive information on recent related vulnerabilities
- Comprehend the security concepts underlying web services
- Access resources and further reading on secure coding practices
Audience
Developers, Professionals
Read more...
