Open Web Application Security Project Training in Nairobi

Open Web Application Security Project Certification (OWASP) Training Course Outline

Module 1: Introduction to OWASP and Web Security Foundations

• What is OWASP? History and Mission
• Importance of Application Security
• Real-World Examples of Web Attacks
• OWASP Projects Overview (Top 10, ASVS, Cheat Sheets, ZAP)
• Key Security Terminologies (Threats, Vulnerabilities, Risks, Exploits)

Module 2: OWASP Top 10 – Core Vulnerabilities (Part 1)

• A01: Broken Access Control
• A02: Cryptographic Failures
• A03: Injection (SQLi, Command Injection)
• A04: Insecure Design
• Vulnerability Examples and Mitigation Strategies

Module 3: OWASP Top 10 – Core Vulnerabilities (Part 2)

• A05: Security Misconfiguration
• A06: Vulnerable and Outdated Components
• A07: Identification and Authentication Failures
• A08: Software and Data Integrity Failures
• A09: Security Logging and Monitoring Failures
• A10: Server-Side Request Forgery (SSRF)

Module 4: Secure Software Development Lifecycle (SSDLC)

• Secure by Design vs. Secure by Default
• The Role of Security in DevOps (DevSecOps)
• Shifting Left: Security Early in the SDLC
• OWASP SAMM and Software Assurance Maturity
• Developer and QA Collaboration for Security

Module 5: OWASP Testing Framework (OTG)

• Introduction to OWASP Testing Framework
• Security Testing Lifecycle Overview
• Phase 1: Before Development (Threat Modeling)
• Phase 2: Design Phase Testing
• Phase 3: Development Phase Testing (Code Reviews, Static Analysis)
• Phase 4: Deployment & Operations Testing

Module 6: Application Security Testing Techniques

• Types of Testing: Manual vs Automated
• Key Techniques: Input Validation, Output Encoding
• Testing Authentication and Authorization
• Session Management Vulnerabilities
• Testing for Error Handling and Information Leakage

Module 7: Client-Side and Business Logic Security

• Client-Side Risks: DOM-Based XSS, Insecure JavaScript
• Web Storage Security Concerns (localStorage/sessionStorage)
• Broken Business Logic: Workflow Manipulation, State Bypass
• Examples of Logic Flaws in E-Commerce and Banking Apps

Module 8: Application Monitoring, Logging, and Security Operations

• Importance of Security Logging
• Log Injection and Log Forging Attacks
• Introduction to SIEM for Web Apps
• Real-time Monitoring and Alerts
• Building an Incident Response-Ready App

Module 9: OWASP Tools and Ecosystem Overview

• OWASP ZAP Introduction and Use Cases
• Burp Suite (Overview for Testers)
• OWASP Dependency-Check for Vulnerability Scanning
• SecurityHeaders.com, JWT.io
• Integrating OWASP Tools in CI/CD

Who should attend this OWASP Certification Course?

This Open Web Application Security Project Training Course is designed to help delegates understand web application vulnerabilities and best practices to mitigate them. The following professionals can benefit from this course:

• Web Developers
• Penetration Testers
• Software Architects and Designers
• System Administrators
• Quality Assurance Testers
• IT Managers
• Web Application Testers

Prerequisites of the OWASP Certification Course

There are no formal prerequisites for this OWASP Training Online Course. However, a basic knowledge of cybersecurity, foundational IT knowledge, familiarity with web concepts, and awareness of common web vulnerabilities can be beneficial for delegates.

OWASP Certification Course Overview

In a digital landscape where cyber threats and data breaches are rampant, the ability to identify and mitigate security vulnerabilities in web applications is paramount. Professionals who aspire to excel in cybersecurity roles and protect organisations from cyber threats should prioritise mastering this course. Additionally, it serves as a crucial foundation for those pursuing Software Testing Certifications and seeking to strengthen their credentials.

This OWASP Certification Course, presented by The Knowledge Academy, is a vital undertaking in today's digital landscape. It equips delegates with crucial knowledge and skills required to identify, prevent, and mitigate security vulnerabilities in web applications. It delves deep into the realm of web application security, offering delegates insights into OWASP's best practices and methodologies.

This 2-day OWASP Training Course provides delegates with a hands-on and immersive learning experience. Delegates will gain in-depth knowledge of web application security, covering various aspects of OWASP. This training equips delegates with the skills needed to identify, prevent, and mitigate security vulnerabilities in web applications effectively.

OWASP  Certification Course Objectives

• To understand the core principles of Web Application Security
• To identify common vulnerabilities and attack vectors
• To learn how to assess and test web applications for security flaws
• To implement security controls and best practices following OWASP guidelines
• To gain proficiency in using security tools and techniques
• To develop skills for secure coding and application development

After completing this OWASP Certification Course at The Knowledge Academy, delegates will emerge as skilled Web Application Security Professionals with the ability to safeguard digital assets and applications effectively. They will be equipped to assess, secure, and maintain web applications, making them less vulnerable to cyber threats.

What’s included in this OWASP Certification Course?

• World-Class Training Sessions from Experienced Instructors
• Open Web Application Security Project (OWASP) Certificate
• Digital Delegate Pack