Software and Web Application Security notes

10 notes by 10 users

Explore GoConqr’s Software and Web Application Security notes, from secure development to web attacks and testing. The page has over 9 notes by over 9 users, for university students and professional candidates practising security concepts, teachers selecting study material, and some school students. Choose a note to begin.

Select topic

Web Application Attacks 13.1 - Essential Iceweasel Add-ons 13.2 - Cross Site Scripting (XSS) 13.2.1 - Browser Redirection and IFRAME Injection 13.2.2 - Stealing Cookies and Session Information 13.2.3 - Exercises 13.3 - File Inclusion Vulnera... neteng33
Software Security Notes Security Requirements Protect data (encrypt) Trust nothing and no one (validate and check authorization) Identify, authenticate and authorize Escape all input Manage secrets (protected stores) MFA and care with passwo... Inês Macedo
Developing Secure Software - created from Mind Map Stages of Security Security should be factored into every stage of the software development life cycle Design Phase: a threat model should be drawn up, this will then be refered to and followed throughout the rest of ... lissy93
Internet Security Threat Model Different from other threat models Attacker isn't in control of the network Attacker hasn't got access to the target's OS Instead attacker sees messages addressed to themselves or others Sees data obtaine... Martin B
Web Application Security Injection :   What ? Untrusted user input is interpreted by server and executed What is impact ? Data modified and stolen. How to prevent it ? - Reject invalid/untrusted input - Use latest frameworks - Hire penet... Namita Tomar
Seguridad de Software Historia Redes conectadas con usuarios simultáneos 1970: Recolección de información en red. Hackers: intercambio de código Antivirus Prevención de ataques, a pesar de esto sigue habiendo ataques debido a poca document... Patricio Estrada
Secure Software Development and Testing - created from Mind Map Security Testing Security Principles Secure Software Development Junyi Guo
Untitled Cross Site Scripting (XSS)     Cross Site Request Forgery (CSRF) Clickjacking (UI Redressing Attack) Local File Inclusion (LFI) Subdomain Takeover Denial of Service (DOS) Authentication Bypass SQL injection ... sidenom demo
Webapp Security 3 aspects of webapp security- authentication-authorization- dataprotectionContainer managed security- Security feature provided by server- [Wildfly] supports 3 types of authentication - Http Basic - new browser page o... Baldwin Kah
CORE DEFENSE - created from Mind Map All user input is untrusted Core Defense Mechanisms Handling user access : unothorized access gökhan şahin

More Software and Web Application Security resources

All Software and Web Application Security resources Quizzes 48 Mind maps 48 Flashcards 27

About software and web application security notes

GoConqr Original

What the notes cover

These software and web application security notes bring together different parts of the unit. Web Application Attacks covers cross-site scripting, browser redirection and session information. Web Application Security discusses injection and ways to prevent it. Webapp Security covers authentication, authorisation and data protection.

Choosing a starting point

For a development focus, start with Software Security Notes, which includes security requirements, threat modelling and secure coding practices. For a testing focus, look at the notes on secure software development and testing, which list static and dynamic testing, fuzzing and penetration testing.

Revising with notes

Read a section, then write down the terms and ideas you want to revisit. Compare them with another note on a related topic. When you want to check recall rather than reread, switch to flashcards or a quiz on the unit page. Pick a topic and see which note helps you explore it.

Frequently asked questions

Which note is a useful place to start?

For secure development, try Software Security Notes. It brings together requirements, threat modelling and secure coding practices. If you want to focus on web attacks instead, Web Application Attacks covers topics including cross-site scripting, browser redirection and the theft of cookies and session information.

Do the notes cover software testing?

Yes. The notes on secure software development and testing include security testing, code review, static and dynamic testing, fuzzing and penetration testing. You can use them alongside Software Security Notes to compare testing topics with requirements, threat modelling and secure coding practices.

Are these notes free to use?

Yes. Every resource listed on this page is free to open and study without an account. The notes were made by GoConqr users. A free account also lets you make your own notes, quizzes, mind maps and flashcards, and save your quiz scores.