Join Kevin Skoglund for an in-depth discussion in this video Keeping code private, part of Programming Foundations: Web Security (2014).
…Controlling output also means controlling visibility.…In the theater, the public audience should be able to see what…is put on stage, but they should not be able to see backstage.…You wouldn't want them watching the set changes,…you don't want them wandering through dressing rooms.…There's a clear dividing line between what gets shown And what stays hidden.…And the same is true for the web.…We are presenting information and visual data to our users.…But they should not see the details of…how we do that job.…For a hacker, seeing the behind the scenes code would be a gold mine of information.…
They would know exactly what security defenses were being used.…And they could pinpoint all the weak spots.…So we must keep our code private.…The first thing to do to control the visibility of…your code is to organize it into public and private areas.…You can think of it as onstage, and backstage.…The onstage would be our public directory.…That's a directory that's going to be accessible by the web server.…It's the point of entry to our website or application.…
This course is great for developers who want to secure their client's websites, and for anyone else who wants to learn more about web security.
- Why security matters
- What is a hacker?
- How to write a security policy
- Cross-site scripting (XSS)
- Cross-site request forgery (CSRF)
- SQL injection
- Session hijacking and fixation
- Passwords and encryption
- Secure credit card payments
Skill Level Beginner
1. Security Overview
2. General Security Principles
3. Filtering Input, Controlling Output
4. The Most Common Attacks
5. Encryption and User Authentication
6. Other Areas of Concern
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.