As the web gained popularity, it also gained more and more security threats. The web is one of the most vulnerable entry points of any system. This class addresses some of these threats

In this 2-day course we will investigate both Internet security in general and more specifically web security for browsers, web servers, and the cloud in general. Recommended as the 4th course in the Information Security Certificate.

Performance Objectives: Upon completion of this course you should be able to:

• Describe a web application and its relationship to a browser
• Understand the workings of the WWW and HTTP
• List and explain the main vulnerabilities against the WWW
• Secure your web pages against attack
• Evaluate risks and implement a proper defense
• Implement TLS/SSL to secure communications
• Describe how JavaScript can be exploited
• Implement defense against JavaScript exploitation
• Describe other network threats and how to mitigate for them
• Use proper standards-based HTTP tools to secure content
• Describe how the cloud relates to modern security
• Implement techniques to secure a cloud-based web infrastructure

Competencies covered in this course: Defining digital forensics, Investigations of operating systems

Intended Audience: Anyone required to use spreadsheets and formulas in their work.

Recommended Pre-requisite: To be successful in this course, you should be familiar with using personal computers, the mouse and keyboard. You should be able to use Windows to launch and close programs; navigate to information stored on the computer; and manage files and folders. Any computer technology professionals needing IT security skillset. This is recommended as the 4th course in the Information Security Certificate.