Web Application Penetration Testing
February 8-10, 2012

The internet today is now an essential tool in bringing together information, personalities, businesses, and more. It enables us to communicate, buy, sell, or trade in our own terms. For all of us users, the stakes are high, for companies who derive revenue from e-commerce, users who trust web applications with sensitive information, and for the criminals who are there waiting for an opportunity to steal payment details or compromise financial databases. This training focuses on how we could start to protect our web applications. Remember, using 128-bit encryption is just the start, and perimiter firewalls are almost rendered useless in web attacks. There are things like cross site scripting, SQL injections, directory traversals, session hijacking, and a lot more to take care of.

Course Outline:

1. Introduction
   a. Web Application Security Overview
   b. The Vulnerability Life Cycle
   c. Writing Bad Code
   d. Web Languages
   e. Web and Databases Servers
   
   
2. Web Application Technologies
   a. The HTTP Protocol
   b. Web Functionality
   c. Encoding Schemes
   
   
3. Web Defense Mechanisms
   a. Authentication
   b. Session Management
   c. Access Control
   d. Input Handling
   e. Boundary Validation
   
   
4. Web Hacking Methodology
   a. Profiling the Application
   b. Client-side Controls
   c. Attacking Authentication
   d. Attacking Authorization
   e. Attacking Session State Management
   f. Code Injections
   g. Directory Path Traversals
   h. Hacking Web Users
   i. Exploiting Information Disclosure Attacking Web Servers
   j. OWASP Top 10
   
   
5. Web Security Practices
   a. Web Security Assessments
   b. Secure Coding
   c. Developing with Security in Mind

"Courses are updated with the current trends and technolgies in information security which will be presented in our fully equiped training laboratory"

Training Details:

• Duration: 3 days
  
  
• Schedule: February 8-10, 2012
  
  
• Time: 9:00 am to 5:00 pm
  
  
• Venue: CheQ Labs, 1708 88 Corporate Center, 141 Sedeno St. corner Valero St., Salcedo Village,
  Makati City Philippines 1227
  
  
• Course Fee: Php 15,000.00 (Exclusive of 12% VAT) Course fee is inclusive of handouts, certificate, snacks and lunch. Please make all checks payable to SeQure Technologies, Inc.
  
  
• For more details, please call Malou Chan at 888-24-37 ext 102 or email inquiry@sequretech.com. Cancellation of registration should be made seven working-days before the training date. Otherwise, 50% of the training fee shall be charged. No show during the training shall be charged 100% of the training fee.