Join Kevin Skoglund for an in-depth discussion in this video Expect the unexpected, part of Foundations of Programming: Web Security.
…Our next core security principle is to always expect the unexpected.…Security's not like chess where you can react to someone else's moves.…You have to assume that you will be hacked and your…job is to figure out how that will happen ahead of time.…You have to prevent the crime before it happens.…It's sometimes called a mystery in reverse.…Ask yourself, what are all the things that a user could try on this page?…A lot of times…what we're looking for are edge cases.…99% of the users will do something exactly the…way we expect, but what will those other 1% do?…Will our code handle those oddball cases appropriately?…Sometimes to do this, we have to get creative, and think outside the box.…
After all, these are the things that we're not expecting.…Let me give you an example, let's imagine that we have a search…box at the top of our website that will search our entire site,…called a global search box.…What if the user submits nothing, or what if they type way too much?…What is they paste in high-ASCII characters from a language like Russian?…
This course is great for developers who want to secure their client's websites, and for anyone else who wants to learn more about web security.
- Why security matters
- What is a hacker?
- How to write a security policy
- Cross-site scripting (XSS)
- Cross-site request forgery (CSRF)
- SQL injection
- Session hijacking and fixation
- Passwords and encryption
- Secure credit card payments
Skill Level Beginner
1. Security Overview
2. General Security Principles
3. Filtering Input, Controlling Output
4. The Most Common Attacks
5. Encryption and User Authentication
6. Other Areas of Concern
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.