實現安全的網路應用程式可能很困難，即使對於可能事先使用過各種加密構建塊（例如加密和數位簽名）的開發人員也是如此。為了讓參與者了解這些加密原語的作用和用法，首先給出了安全通信的主要要求（安全確認、完整性、機密性、遠端識別和匿名）的堅實基礎，同時還介紹了可能破壞這些要求的典型問題以及實際解決方案。
由於網路安全的一個關鍵方面是密碼學，因此還討論了對稱密碼學、哈希、非對稱密碼學和密鑰協定中最重要的加密演算法。這些元素不是提供深入的數學背景，而是從開發人員的角度進行討論，展示了與加密使用相關的典型用例示例和實際考慮，例如公鑰基礎設施。介紹了安全通信的許多領域的安全協定，並深入討論了最廣泛使用的協定系列，例如 IPSEC 和 SSL/TLS。
討論了與某些加密演算法和加密協定相關的典型加密漏洞，例如 BEAST、CRIME、TIME、BREACH、FREAK、Logjam、Padding oracle、Lucky Thirteen、POODLE 等，以及 RSA 計時攻擊。在每種情況下，都會針對每個問題描述實際考慮和潛在後果，同樣，無需深入數學細節。
最後，由於 XML 技術是網路應用程式數據交換的核心，因此描述了 XML 的安全方面。這包括在 Web 服務和 SOAP 消息中使用 XML 以及 XML 簽名和 XML 加密等保護措施，以及這些保護措施中的弱點和 XML 特定的安全問題，例如 XML 注入、XML 外部實體 （XXE） 攻擊、XML 炸彈和 XPath 注入。
參加本課程的學員將
Course - Open Source Intelligence (OSINT) Advanced
一般課程資訊
Paulo Gouveia - EID
Course - C/C++ Secure Coding
機器翻譯
Real-life examples.
Kristoffer Opdahl - Buypass AS
Course - Web Security with the OWASP Testing Framework
The trainer's subject knowledge was excellent, and the way the sessions were set out so that the audience could follow along with the demonstrations really helped to cement that knowledge, compared to just sitting and listening.
Jack Allan - RSM UK Management Ltd.
Course - Secure Developer .NET (Inc OWASP)
Nothing it was perfect.
Zola Madolo - Vodacom
Course - Android Security
Piotr was incredibly knowledgeable and very patient. He was great at explaining things and I'd strongly recommend this course to others
Victoria Harper
Course - Open Source Cyber Intelligence - Introduction
The labs
Katekani Nkuna - Vodacom
Course - The Secure Coding Landscape
Trainer willing to answer questions and give bunch of examples for us to learn.
Eldrick Ricamara - Human Edge Software Philippines, Inc. (part of Tribal Group)
Course - Security Testing
It opens up a lot and gives lots of insight what security
Nolbabalo Tshotsho - Vodacom SA
Course - Advanced Java Security
Acceptance and cooperation of the coach to give the best thing
Nayef Hamouda - PSO
Course - WEBAP - Web Application Security
很多信息解釋得很好。
Good 示例，有趣的練習。
培訓師向我們展示了他的真實世界經驗。
Gergely Batho - GE Medical Systems Polska Sp. Z O.O.
Course - Application Security for Developers
機器翻譯
The explanations of how the most common attacks happen against web applications.
Jacob Fisher - Mikron SA Boudry
Course - Advanced C#, ASP.NET and Web Application Security
Ann is very knowledgeable on the subject. She is constantly varying pace according to the feedback. There is a lot of room for discussing attendee's own experiences. It was a great joy !.
Sjoerd Hulzinga - KPN p/a Bloomville
Course - IoT Security Architecture
Trainers command in his field
Adnan ul Husnain Hashmi - TDM GROUP
Course - Web Application Security
I was benefit from the exercises (SQL injection, XSS, CRSF. .).
David Lemoine - Statistical Solutions
Course - .NET, C# and ASP.NET Security Development
I genuinely liked the real world scenarios.
Michail Alvanos
Course - Java and Web Application Security
The subject of the course was very interesting and gave us many ideas.
Anastasios Manios
Course - Secure coding in PHP
I liked the trainer was passionate about the subject and very convincing too.
Diana Vladulescu
Course - Secure Web Application Development and Testing
Information System Security,台中市, 台中市Information System Security企業培訓, Information System Security, 台中市, 台中市Information System Security老師, 台中市Information System Security課程, 台中市短期Information System Security培訓, 小組Information System Security課程在台中市, 台中市Information System Security訓練, 台中市Information System Security晚上培訓, 台中市一對一Information System Security課程, 台中市Information System Security周末培訓, 台中市Information System Security輔導班, 學Information System Security班在台中市, 台中市Information System Security培訓師, 學習Information System Security在台中市
