Mô tả

Node.js is a server-side JavaScript platform that's rapidly being adopted by many individuals and large companies. This course, shows you how to apply secure application development practices to Node.js with Express and Angular by learning some of the security risks that are of concern in this area. You'll see the execution of exploits associated with these risks and follow through with the implementation steps for mitigating each one. First, you'll learn about protecting data from extraction, as well as how to mitigate this risk. Next, you'll learn about how to ensure legitimacy of requests. Finally, you'll learn about blocking content-hijacking and what you can do to prevent it in the first place. By the end of this course, you'll have learned about many of the risks, vulnerabilities, and mitigation techniques, why they are so important, and you'll be more equipped to use secure application development practices.

Bạn sẽ học được gì

After this course you will know how to apply common security mitigation techniques to a web application built with Angular, ExpressJS, and NodeJS.

Yêu cầu

  • You should have a basic understanding of client-server architecture and how communication is accomplished across the network. This will be needed to understand the security concepts and defense techniques used in the course.
  • We'll be using JavaScript, NodeJS with Express, and Angular in the sample application. It will be helpful if you have some familiarity with these technologies, however, the concepts regarding security do not require specific knowledge in this technologies and can be applied to any other technology stack as well.

Nội dung khoá học

5 sections

Introduction

5 lectures
Introduction
00:32
Application Security & Risk
00:59
The Role of Application Developers in Security
01:18
The Vulnerable & Attacker Sample Applications
01:01
Running & Exploring the Vulnerable Application
02:11

Protecting Data from Extraction

16 lectures
Introduction
00:52
Attack Reconnaissance
01:26
Attack Execution
02:05
Cross-site Scripting
00:19
Attack Prevention
00:48
Prevention with Input Handling
00:47
Input Handling Examples
01:31
Prevention with a Content Security Policy
01:02
Correcting in-line Styles
00:32
Correcting in-line Scripts
00:28
Content Security Policy Example
00:45
Content Security Policy Browser Support
00:36
Defense with Input Handling in Angular
02:36
Defense with Input Handling in Node.js
03:17
Defense with a Content Security Policy
04:23
Content Security Policy in Action
01:11

Hide Network Traffic from Snooping

10 lectures
Introduction
00:47
Attack Reconnaissance & Execution
02:24
Man in the Middle
00:32
Client/Server Overview
00:21
Attacker Positioning
00:53
Prevention with Transport Layer Security
00:19
Transport Layer Security
00:26
Generating a Self-signed Certificate
01:58
Implementing HTTPS with a Certificate
02:18
Defense with Transport Layer Security in Place
01:32

Ensure Legitimacy of Requests

14 lectures
Introduction
00:39
Attack Reconnaissance
02:05
Attack Setup
02:11
Attack Execution
01:39
Cross-site Request Forgery
00:21
Attack Prevention
00:42
Importance of Cross-site Scripting Mitigation
00:17
Prevention with HTTP Header Checks
00:24
Origin and Referer Header Example
01:06
Prevention with the Synchronizer Token Pattern
00:24
Synchronizer Token Pattern Example
01:07
Implementation of HTTP Origin and Referer Header Checks
03:13
Defense with HTTP Origin and Referer Header Checks
02:03
Defense with the Synchronizer Token Pattern
04:48

Block Content Hijacking

10 lectures
Introduction
00:35
Attack Reconnaissance & Setup
02:06
Attack Execution
01:01
Clickjacking
00:21
Attack Prevention
00:18
Prevention with HTTP Headers
01:14
Browser Support
00:50
Prevention Through Denying Framing
02:45
Prevention Through Limiting Framing from the Same Origin
01:49
Prevention Through Limiting Framing to Specific Origins
02:03

Đánh giá của học viên

Chưa có đánh giá
Course Rating
5
0%
4
0%
3
0%
2
0%
1
0%

Bình luận khách hàng

Viết Bình Luận

Bạn đánh giá khoá học này thế nào?

image

Đăng ký get khoá học Udemy - Unica - Gitiho giá chỉ 50k!

Get khoá học giá rẻ ngay trước khi bị fix.