實現安全的網路應用程式可能很困難，即使對於可能事先使用過各種加密構建塊（例如加密和數位簽名）的開發人員也是如此。為了讓參與者了解這些加密原語的作用和用法，首先給出了安全通信的主要要求（安全確認、完整性、機密性、遠端識別和匿名）的堅實基礎，同時還介紹了可能破壞這些要求的典型問題以及實際解決方案。
由於網路安全的一個關鍵方面是密碼學，因此還討論了對稱密碼學、哈希、非對稱密碼學和密鑰協定中最重要的加密演算法。這些元素不是提供深入的數學背景，而是從開發人員的角度進行討論，展示了與加密使用相關的典型用例示例和實際考慮，例如公鑰基礎設施。介紹了安全通信的許多領域的安全協定，並深入討論了最廣泛使用的協定系列，例如 IPSEC 和 SSL/TLS。
討論了與某些加密演算法和加密協定相關的典型加密漏洞，例如 BEAST、CRIME、TIME、BREACH、FREAK、Logjam、Padding oracle、Lucky Thirteen、POODLE 等，以及 RSA 計時攻擊。在每種情況下，都會針對每個問題描述實際考慮和潛在後果，同樣，無需深入數學細節。
最後，由於 XML 技術是網路應用程式數據交換的核心，因此描述了 XML 的安全方面。這包括在 Web 服務和 SOAP 消息中使用 XML 以及 XML 簽名和 XML 加密等保護措施，以及這些保護措施中的弱點和 XML 特定的安全問題，例如 XML 注入、XML 外部實體 （XXE） 攻擊、XML 炸彈和 XPath 注入。
參加本課程的學員將
Course - Open Source Intelligence (OSINT) Advanced
一般課程資訊
Paulo Gouveia - EID
Course - C/C++ Secure Coding
機器翻譯
The fact that there were practical examples with the content
Smita Hanuman - Standard Bank of SA Ltd
Course - Basel III – Certified Basel Professional
Real-life examples.
Kristoffer Opdahl - Buypass AS
Course - Web Security with the OWASP Testing Framework
Questions, that helps me a lot to understand the characteristics of CRISC examination.
Masakazu Yoshijima - Bank of Yokohama, Ltd.
Course - CRISC - Certified in Risk and Information Systems Control
The trainer's subject knowledge was excellent, and the way the sessions were set out so that the audience could follow along with the demonstrations really helped to cement that knowledge, compared to just sitting and listening.
Jack Allan - RSM UK Management Ltd.
Course - Secure Developer .NET (Inc OWASP)
The trainer was extremely knowledgable and helpful. While walking through the exercises, I wasn't rushed and was allowed to make mistakes (to a point) and then help was given to correct to them where needed.
Tim Wilkes - Gamma
Course - OpenStack Security
講師擁有非常廣泛的知識，並致力於他的工作。他能夠讓聽眾對他的課程感興趣。培訓範圍完全符合我的期望。
Karolina Pfajfer - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - MasterClass Certified Ethical Hacker Program
機器翻譯
The subject matter was very interesting and was able to relate this to my current role at Vodacom.
Malcolm Frank - Vodacom SA
Course - Cybersecurity Fundamentals - A Practical Course
Nothing it was perfect.
Zola Madolo - Vodacom
Course - Android Security
Piotr was incredibly knowledgeable and very patient. He was great at explaining things and I'd strongly recommend this course to others
Victoria Harper
Course - Open Source Cyber Intelligence - Introduction
The training was excellent, than you Ditmar.
Maria Gagliardi - EY Global Services (Poland) Sp. z o.o.
Course - CISSP - Certified Information Systems Security Professional
