Application Logic

This course discusses securing common logic within your application.

5 videos  //  73 minutes of training

Free training week — 1,400+ on-demand courses and hands-on labs

Course description

In this course, you’ll explore common types of application logic that are often sources of security vulnerabilities. These affect every part of your application and include things such as sessions, cookies, file uploads and error handling.

Course syllabus

Authentication and AuthorizationDuration: 16:23

A look at the distinction between authentication and authorization and how/when to implement them.

Input ValidationDuration: 15:29

An overview of handling user input securely.

Session and CookiesDuration: 11:34

How to securely store ephemeral data.

File UploadsDuration: 18:04

Take a look at securing user-uploaded files.

Exception HandlingDuration: 11:43

How to handle the unexpected.

Meet the author

David Myers

LinkedIn

David Myers is a senior full-stack software engineer specializing in the development of complex web applications, with over 18 years of experience developing for the web. He primarily works within the LAMP stack of technologies but often utilizes whatever technology is needed. This includes Nginx, Python and Redis when discussing back-end technologies and ES6, Typescript, jQuery and Angular for front-end technologies. He has a broad range of experience working with clients and companies across many different industries.

Plans & pricing

Infosec Skills Personal

  • 190+ role-guided learning paths (e.g., Ethical Hacking, Threat Hunting)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Custom certification practice exams (e.g., CISSP, Security+)
  • Skill assessments
  • Infosec peer community support

Infosec Skills Teams

$799 per license / year

Book a Meeting
  • Team administration and reporting
  • Dedicated client success manager
  • Single sign-on (SSO)
    Easily authenticate and manage your learners by connecting to any identity provider that supports the SAML 2.0 standard.
  • Integrations via API
    Retrieve training performance and engagement metrics and integrate learner data into your existing LMS or HRS.
  • 190+ role-guided learning paths and assessments (e.g., Incident Response)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Create and assign custom learning paths
  • Custom certification practice exams (e.g., CISSP, CISA)
  • Optional upgrade: Guarantee team certification with live boot camps

Award-winning training that you can trust

IDC MarketScape Leader: U.S. IT Training

IDC MarketScape Leader: U.S. IT Training

Infosec Skills

eLearning Content

eLearning Content

Infosec Skills

Best Product - Cybersecurity Training for Infosec Professionals

Best Product - Cybersecurity Training for Infosec Professionals

Infosec Skills

Security Education & Platform

Security Education & Platform

Infosec Skills

Ranked #52 in Top 100 Global Software Sellers

Ranked #52 in Top 100 Global Software Sellers

Infosec