Recommended Paths: Web Developer - Front End

We offer two separate paths for web developers, based on whether they engage in front-end or back-end web development.

After completing their appropriate path, developers will be able to understand security threats for the languages/frameworks/technologies they work in and have the ability to develop mitigation strategies during their software build.

Foundational: Web Developer

Foundational principles of application security for web developers. (Video + Hands On)

Total Learning Path Duration: 4 hours 24 minutes

Introduction to Security Journey

Introduction to Security

ClickJacking

Core Security Concepts

Broken Access Control

Attacks

Attackers

Threat Landscape

Command Injection

The Hacker Mindset

Social Engineering

Security Myths

Security Culture and Mindset

Data Breaches

Privacy and Customer Data Protection

Encoding

Dealing with Vulnerabilities

Secure Development Lifecycle

Six Foundational Truths of Application Security

Security Requirements

Secure Design Principles | Part 1

Secure Design Principles | Part 2

Threat Modeling Basics

Intermediate: Web Developer

Technical deep dive into the threats and security controls relevant to web developers. (Video + Hands On)

Total Learning Path Duration: 5 hours 5 minutes

Threat Modeling Process

Threat Modeling

Input Validation

Output Encoding

Authentication Theory

Logging and Exception Handling

Cryptography

Hashing

Encryption

Software Supply Chain

OWASP Top 10 | Part 1

OWASP Top 10 | Part 2

OWASP Top 10 | Part 3

OWASP Session Managment Cheat Sheet

OWASP Key Managment Cheat Sheet

OWASP Secrets Managment Cheat Sheet | Part 1

OWASP Secrets Managment Cheat Sheet | Part 2

Static Application Security Testing (SAST)

Static Application Security Testing (SAST)

Dynamic Application Security Testing (DAST)

Dynamic Application Security Testing (DAST)

Vulnerability Scanning

Advanced: ClojureScript (Web Developer - Frontend)

Secure design, secure coding, and advanced Clojure security techniques, encompassing vulnerability prevention and secure coding principles for ClojureScript developers. (Video + Hands On)

Total Learning Path Duration: 5 hours 10 minutes

Intro to Secure Development

Designing a Secure App or Product

Secure Design Principles in Action: Part 1

Secure Design Principles in Action: Part 2

Intro to Secure Coding

Producing Clean, Maintainable, and Secure Code

Secure Coding Best Practices: Part 1

Secure Coding Best Practices: Part 2

Secure Code Review | Part 1

Secure Code Review | Part 2

Securing the Development Environment

Protecting your Code Repository

Clojure Injection Attacks

Cross-Site Scripting (XSS) | Part 1

Cross-Site Scripting (XSS) | Part 2

Reflected Cross-Site Scripting (XSS)

Stored Cross-Site Scripting (XSS)

Clojure Insecure Design

Insecure Design

Clojure Software and Data Integrity Failures

Software and Data Integrity Failures

XML External Entities (XXE)

Clojure Vulnerable and Outdated Components

Secure Coding with ClojureScript

Advanced: JavaScript (Angular)

Secure design, secure coding, and advanced JavaScript security techniques, encompassing vulnerability prevention, threat landscape awareness, and secure coding principles for Angular developers. (Video + Hands On)

Total Learning Path Duration: 5 hours 21 minutes

Intro to Secure Development

Designing a Secure App or Product

Secure Design Principles in Action: Part 1

Secure Design Principles in Action: Part 2

Intro to Secure Coding

Producing Clean, Maintainable, and Secure Code

Secure Coding Best Practices: Part 1

Secure Coding Best Practices: Part 2

Secure Code Review | Part 1

Secure Code Review | Part 2

Securing the Development Environment

Protecting your Code Repository

JavaScript: Threat Landscape

Cross-Site Scripting (XSS) | Part 1

Cross-Site Scripting (XSS) | Part 2

DOM-Based Cross-Site Scripting (XSS)

Reflected Cross-Site Scripting (XSS)

Stored Cross-Site Scripting (XSS)

JavaScript: Secure Coding Principles

Encoding, Hashing, and Encryption

JavaScript: Third-party JavaScript Managment

Secure Coding with Angular

Angular Secure Coding Tips | Part 1

Angular Secure Coding Tips | Part 2

Advanced: JavaScript (React)

Secure design, secure coding, and advanced JavaScript security techniques, encompassing vulnerability prevention, threat landscape awareness, and secure coding principles for React developers. (Video + Hands On)

Total Learning Path Duration: 5 hours 10 minutes

Intro to Secure Development

Designing a Secure App or Product

Secure Design Principles in Action: Part 1

Secure Design Principles in Action: Part 2

Intro to Secure Coding

Producing Clean, Maintainable, and Secure Code

Secure Coding Best Practices: Part 1

Secure Coding Best Practices: Part 2

Secure Code Review | Part 1

Secure Code Review | Part 2

Securing the Development Environment

Protecting your Code Repository

JavaScript: Threat Landscape

Cross-Site Scripting (XSS) | Part 1

Cross-Site Scripting (XSS) | Part 2

DOM-Based Cross-Site Scripting (XSS)

Reflected Cross-Site Scripting (XSS)

Stored Cross-Site Scripting (XSS)

JavaScript: Secure Coding Principles

Encoding, Hashing, and Encryption

Digital Signatures

JavaScript: Third-party JavaScript Managment

Secure Coding with React | Part 1

Secure Coding with React | Part 2

Advanced: TypeScript (Frontend)

Secure design, secure coding, and advanced front-end TypeScript security techniques, including principles of secure development, best practices, and code reviews. (Video + Hands On)

Total Learning Path Duration: 4 hours 55 minutes

Intro to Secure Development

Designing a Secure App or Product

Secure Design Principles in Action: Part 1

Secure Design Principles in Action: Part 2

Intro to Secure Coding

Producing Clean, Maintainable, and Secure Code

Secure Coding Best Practices: Part 1

Secure Coding Best Practices: Part 2

Secure Code Review | Part 1

Secure Code Review | Part 2

Securing the Development Environment

Protecting your Code Repository

TypeScript: Introduction to TypeScript Security

Cross-Site Scripting (XSS) | Part 1

Cross-Site Scripting (XSS) | Part 2

DOM-Based Cross-Site Scripting (XSS)

TypeScript Secure Constructs with TypeScript Part 1

Reflected Cross-Site Scripting (XSS)

TypeScript: Secure Constructs with TypeScript Part 2

Stored Cross-Site Scripting (XSS)

TypeScript: Secure Coding with TypeScript Part 1

Encoding, Hashing, and Encryption

TypeScript: Secure Coding with TypeScript Part 2

TypeScript: TypeScript Secure Build Toolchain