Announcing SANS 319: Introduction to Web Application Security

Search Merit Site

Text Version

Site Map

Network

News

Events

Home

News and Press Releases - Merit Network, Inc.

Announcing SANS 319: Introduction to Web Application Security

May 13, 2009

Merit Network is pleased to host an interactive video presentation of the SANS Institute's Security 319 course, "Introduction to Web Application Security." The workshop will be held Monday and Tuesday, June 29-30, 2009 at the MITC building in Ann Arbor. The workshop will be of value to anyone interested in securing Web applications against common threats.

In this innovative presentation, the course will be delivered by a SANS instructor via interactive teleconference to several participating sites across the U.S. A full course description appears below.

The registration fee for attendees from educational institutions and state and local governments is $750, a savings of over 55% compared to the standard price of $1,700 when delivered in a classroom setting. This is a unique opportunity to engage in very high-quality security training at a tremendous savings. In accordance with the SANS Institute's policies, the reduced price is available only to attendees from educational institutions and state and local governments. Others may attend for the retail price of $1,700.

Registration is now available at:

http://www.merit.edu/events/archive/specialevents/sans319/

Details about the course

From a mere 26 Web servers operating in November 1992 growing to well over 100 million Web sites today, we have come a long way in Web technology over a short period of time. Today, almost every organization has its own Web site for conducting business transactions or other critical functions. And for many companies, their online presence has become a major revenue generator. As everyone jumps on the bandwagon to do business on the Web, many problems can arise which are directly related to the security aspects of Web applications. The adage "where there is money, there is crime" has become true on a daily basis as we see credit cards and other financial data compromised through Web application vulnerabilities. And that is not even the full extent of the problem because Web-based malware and worms are still spreading in the wild.

"Intro to Web Application Security" is a two-day, hands-on, action-packed course covering the common vulnerabilities that are leveraged by attackers, the basic principles of securing Web applications, and basic testing techniques for detecting the vulnerabilities. This course will help you understand the mechanics of the components necessary for effective Web application security which will then enable you to properly defend your organization's assets. With the information you learn in this class, you will be able to perform basic security testing on Web applications as well as architect, design, and develop more secure Web applications.

This course is particularly well suited to developers, QA analysts, and infrastructure security professionals who have an interest in exploring the Web application security world.

Sampling of Topics

Securing Web Application Architectures and Infrastructures
Cryptography
Authentication
Access Control
Session Mechanism
Web Application Logging
Input Issues and Validation
SQL Injection
Cross-Site Scripting
Phishing
HTTP Response Splitting
Cross-Site Request Forgery

Who Should Attend?

Security practitioners and managers
Auditors
QA analysts who want to learn the mechanics of Web applications for better testing
IT infrastructure professionals who want a basic understanding of Web technologies and security issues
Anyone interested in techniques for securing Web applications

For registration, laptop requirements and additional details, please see:

http://www.merit.edu/events/archive/specialevents/sans319/

For press/media contact:

Elwood Downing
Merit Network, Inc.
Phone: (734)527-5702
Email:

Go to the Merit Network News Archive.