Developing a secure networked application can be challenging, even for developers who have prior experience with cryptographic primitives like encryption and digital signatures. To help participants grasp the role and application of these cryptographic tools, this course begins by establishing a strong foundation in the core requirements of secure communication: secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. It also addresses common threats that can compromise these requirements, alongside practical real-world solutions.
Given that cryptography is central to network security, the course covers essential algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. Rather than focusing on complex mathematics, the content approaches these topics from a developer's perspective, providing typical use-case examples and practical considerations such as public key infrastructures. Various security protocols used in secure communication are introduced, with detailed discussions on widely adopted protocol families like IPSEC and SSL/TLS.
Typical cryptographic vulnerabilities are explored, covering issues related to specific algorithms and protocols such as BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and RSA timing attacks. For each vulnerability, the course outlines practical implications and potential consequences without delving into deep mathematical theory.
Finally, since XML is pivotal for data exchange in networked applications, the security aspects of XML are thoroughly examined. This includes the use of XML within web services and SOAP messages, along with protection mechanisms like XML Signature and XML Encryption. The course also addresses weaknesses in these measures and specific XML security issues, including XML injection, XML External Entity (XXE) attacks, XML bombs, and XPath injection.
Participants attending this course will
- Grasp the fundamental concepts of security, IT security, and secure coding
- Understand the requirements for secure communication
- Learn about network attacks and defenses across various OSI layers
- Gain practical knowledge of cryptography
- Comprehend essential security protocols
- Understand recent attacks targeting cryptosystems
- Receive information on recent related vulnerabilities
- Understand the security concepts underlying web services
- Access sources and further readings on secure coding practices
Audience
Developers, Professionals
Read more...
