Business and technology qualifications, Levels 3-6, in Brussels. Explore qualifications
Portal login
Level 5 Diploma in Cyber Security

OWASP Top Ten web risks (injection, XSS, insecure design, broken access control, misconfiguration), CSRF and SSRF

CYB501 · Security Testing — Week 4 of 16

CourseCYB501
Week4 of 16
SemesterI
TutorOnline in the course chat

This week’s topics

OWASP Top Ten web risks (injection, XSS, insecure design, broken access control, misconfiguration), CSRF and SSRF

  1. OWASP Top Ten web risks (injection, XSS, insecure design, broken access control, misconfiguration), CSRF and SSRF
  2. Browser-based threats from plug-ins, cookies and session management

What you will be able to do

  • 2.2 Explain common web application vulnerabilities and attack techniques.
  • 2.3 Analyse web browser vulnerabilities and their impact on security.

Activity

Seminar, guided reading and a short written task: explain common web application vulnerabilities and attack techniques.

Study materials

The teaching notes, exercises and videos of this week are in the student portal. Your portal is set up as soon as you receive final acceptance, so you can open them before the semester starts.
Week 3Week 5
Course chat

Admitted students ask questions on this week’s page in the student portal: an AI assistant trained on the course answers first, and during the course’s timetabled classes Connect to your tutor brings your tutor into the chat, who may start a call if needed.

Open this week in the portal
Course plan
  • Week 1: The need for security testing: definition and benefits for …
  • Week 2: Security testing approaches: SAST and code review, DAST, IA…
  • Week 3: Web application security: key features from a security pers…
  • Week 4: OWASP Top Ten web risks (injection, XSS, insecure design, b…
  • Week 5: Web security tools lab: Burp Suite, OWASP ZAP and vulnerabi…
  • Week 6: Evaluating web security tools: strengths and limitations, a…
  • Week 7: Mobile ecosystem: app architecture and storage, iOS vs. And…
  • Midterm: Midterm evaluation
  • Week 9: Mobile vulnerabilities: OWASP Mobile Top 10, jailbreaking a…
  • Week 10: Mobile security analysis: CVSS scoring, remediation strateg…
  • Week 11: Ethics and professional standards: confidentiality and inte…
  • Week 12: Applying Security Testing in practice: case studies
  • Week 13: Assignment workshop: research, planning and referencing
  • Week 14: Assignment workshop: drafting, feedback and improvement
  • Week 15: Review and coursework completion
  • Final: Final assessment and submission
Back to the course
Scroll