Special offers now — see discounted courses.
day
:
hour
:
min
:
sec
See special offers
OWASP Top 10: #3 Sensitive Data Exposure and #4 External Entities (XXE) (2019)

OWASP Top 10: #3 Sensitive Data Exposure and #4 External Entities (XXE) (2019)

27mIntermediate2019-05-13

Authors

Caroline Wong

Caroline Wong

Vice President of Cobalt.io

Course details

The Open Web Application Security Project (OWASP) was formed to provide the public with the resources needed to understand and enhance software security. The OWASP Top 10 list describes the ten biggest vulnerabilities. In this course, Caroline Wong takes a deep dive into the third and fourth categories of security vulnerabilities in the OWASP Top 10—sensitive data exposure and XML external entities (XXE). Caroline covers how sensitive data exposure and XXE attacks work, providing real-world examples that demonstrate how they affect companies and consumers alike. She also shares techniques that can help you prevent these types of attacks.

Skills covered

Application SecurityCybersecurityDeep Dive (X:Y)

Concepts

0. Introduction

  • 01 - Prevent common software vulnerabilities

1. Sensitive Data Exposure - How Does It Work

  • 02 - General concept

2. Impact of Sensitive Data Exposure

  • 03 - Example scenario 1
  • 04 - Example scenario 2

3. Preventing Sensitive Data Exposure

  • 05 - Laws and regulations
  • 06 - Reducing scope
  • 07 - Encryption (TLS and HSTS)

4. XXE - How Does It Work

  • 08 - General concept

5. Impact of XXE

  • 09 - Example scenario 1
  • 10 - Example scenario 2

6. Preventing XXE

  • 11 - Disable XXE processing
  • 12 - Whitelisting and validating input
  • 13 - Upgrade all XML processors and libraries

Conclusion

  • 14 - Next steps

About us

LyndaKade is a leading learning platform that helps people learn business, software, technology, and creative skills to achieve personal and professional goals.

Phone numberAparat ChannelTelegram SupportTelegram ChannelInstagram Page

All rights to this site belong to LyndaKade.

Terms of Service|Privacy Policy

نماد الکترونیک enamad در صورت اتصال با آی‌پی داخل کشور، نمایش داده خواهد شد.
logo-samandehi - لوگو ساماندهی
Zarinpal
Zibal