Web and Database Security

Introduction, HTTP Protocol, Web Functionality, Encoding Schemes, Enumerating Content and Functionality, Analyzing the Application ,Authentication Security: Authentication Techniques, Design Flaws in Authentication, Implementation Flaws in Authentication, Securing Authentication, Path Traversal Attacks, Injection Attacks: Injecting into Interpreted Contexts, SQL Injection, NoSQL Injection, XPath Injection, LDAP Injection, XML Injection, Http Injection, Mail Service Injection

Types of XSS, XSS in Real World, Finding and Exploiting XSS Vulnerabilities, Preventing XSS Attacks, User Attacks: Inducing User Actions, Capturing Cross-Domain Data, Client-Side Injection Attacks, Local Privacy Attacks, ActiveX Control attacks, Browser Attacks

Approaches to Code Review, Signatures of Common Vulnerabilities, Analysis of Java platform, Analysis of ASP.NET platform, Analysis of PHP, Analysis of Perl, Analysis of Javascript, Analysis of SQL, Introduction To Database Security: Fundamental Data Security Requirements, Data Security Concerns, Compliance Mandates, Security Risks, Developing Enterprise Security Policy, Defining a Security Policy, Implementing a Security Policy, Techniques to Enforce Security

User Authentication, Protecting Passwords, Creating Fixed Database Links, Encrypting Database Link Passwords, Using Database Links Without Credentials, Using Database Links And Changing Passwords, Auditing With Database Links, Restricting A Database Link With Views, Trust Management & Negotiation ,

Database Security Basics, Security Checklist, Reducing Administrative Effort, Applying Security Patches, Default Security Settings, Secure Password Support, Enforcing Password Management, Protecting The Data Dictionary, System and Object Privileges, Secure Data Outsourcing, Security in Advanced Database Systems, Managing Enterprise User Security.