Secure Web Development - OWASP Top 10 and Beyond

Name: Secure Web Development - OWASP Top 10 and Beyond
Rating: 4.1 (47 reviews)

Learn to Build Secure Web Applications: Mitigate Vulnerabilities, Protect Data, and Master Security Best Practices.

Created byKay Win Lee

Last updated 1/2025

English

What you'll learn

Understand the importance of web security: Learn the impact of security breaches on businesses, users, and society, and grasp core security principles.
Mitigate top OWASP vulnerabilities: Understand OWASP Top 10 vulnerabilities (e.g., SQL injection, XSS) and how to prevent them in web applications.
Implement secure software testing practices: Learn about static and dynamic security testing (SAST, DAST) and penetration testing.
Apply secure coding principles: Write secure code by following best practices and secure development guidelines.
Protect sensitive data: Learn how to securely handle, store, and encrypt data both in transit and at rest.
Develop and test a secure web application: Build and secure a web application, then test it for vulnerabilities using learned concepts.

Course content

8 sections • 34 lectures • 3h 23m total length

Introduction to Secure Web Development2:44
Learn the course objectives and scope of secure web development, focusing on the OWASP top ten, secure coding, and basic security testing to protect user data and trust.
The Current State of Web Security5:14
Basics of Web Application Architecture5:20

The CIA Triad: Confidentiality, Integrity, and Availability5:19
The CIA Triad
Least Privilege Principle4:29
Least Privilege Principle
Secure by Design5:06
Learn how secure by design embeds security into the development lifecycle from day one, using threat modeling, defined security requirements, and secure design patterns to reduce risk and build trust.
Secure by Design
Defense In Depth6:52
Defense In Depth

Overview of OWASP7:12
Overview of OWASP
Injection Attacks (SQL, NoSQL, OS Command Injection)5:30
Injection Attacks
Broken Authentication7:45
Explore broken authentication, including brute force, credential stuffing, and session hijacking, and learn practical defenses like strong passwords, passwordless methods, MFA, secure cookies, and rate limiting.
Broken Authentication
Sensitive Data Exposure6:40
Sensitive Data Exposure
XML External Entities (XXE)5:56
XML External Entities (XXE)
Broken Access Control6:23
Broken Access Control
Security Misconfiguration7:28
Security Misconfiguration
Cross-Site Scripting (XSS)6:50
Cross-Site-Scripting (XSS)
Insecure Deserialization7:06
Insecure Deserialization
Using Components with Known Vulnerabilities9:17
Using Components with Known Vulnerabilities
Insufficient Logging and Monitoring9:36
Insufficient Logging and Monitoring

Introduction to Secure Software Testing4:53
Introduction to Secure Software Testing
Static Application Security Testing (SAST)4:41
Master static application security testing (SAST) to analyze code without execution, detect vulnerabilities like SQL injection, XSS, and buffer overflows early, and integrate with CI/CD pipelines for developer insights.
Static Application Security Testing (SAST)
Dynamic Application Security Testing (DAST)4:16
Explore dynamic application security testing (DAST) to test live running applications for vulnerabilities using black box techniques, focusing on broken authentication, misconfigurations, and insecure data handling in real world deployments.
Dynamic Application Security Testing (DAST)
Penetration Testing Basics4:46
Penetration Testing Basics
Automated Testing Tools5:20
Automated Testing Tools

Secure Coding Guidelines6:51
Apply secure coding guidelines to prevent OWASP vulnerabilities through input validation, error handling, and secret management. Integrate OWASP Secure Coding Practices and SDL into CI/CD for secure web apps.
Secure Coding Guidelines
Authentication and Authorization6:58
Authentication and Authorization
Data Protection5:50
Data Protection
Regular Updates and Patching5:50
Apply updates via patch management, prioritize critical fixes, and use canary deployments for automated updates; monitor dependencies with Dependabot or Snyk, maintain version history, and ensure backups and recovery testing.
Regular Updates and Patching

Requirements

Basic knowledge of web development (HTML, CSS, JavaScript)
Familiarity with server-side languages (PHP, Python, Java)

Description

Are you ready to create web applications that are not only functional but also secure? This course, Secure Web Development - OWASP Top 10 and Beyond, is designed to introduce you to the foundational principles of web security. Whether you’re an aspiring web developer or an entry-level programmer, this course equips you with the knowledge and skills to protect your applications from common vulnerabilities.

You’ll begin by understanding the current state of web security, exploring real-world breaches, and learning why secure web development is essential. From there, you’ll dive into critical topics such as the OWASP Top 10 vulnerabilities, which include injection attacks, broken authentication, cross-site scripting, and more.

The course emphasizes practical, hands-on learning. You’ll explore static and dynamic testing tools, learn secure coding practices, and work on a final project where you’ll build and secure a web application. Key topics also include protecting sensitive data, implementing role-based access control, and ensuring secure application architecture.

By the end of this course, you’ll be equipped to recognize and mitigate security risks, protect user data, and build robust applications. With lifetime access to resources and real-world examples, this course ensures you can apply these concepts at your own pace. Start your journey today and join a community of developers prioritizing security!

Who this course is for:

Beginner web developers who want to learn how to build secure applications
Aspiring cybersecurity professionals seeking an introduction to web security
Anyone interested in understanding how to protect web applications from common vulnerabilities
Developers looking to improve their understanding of secure coding practices and software testing for security

Secure Web Development - OWASP Top 10 and Beyond

What you'll learn

Explore related topics

Course content

Introduction to Secure Web Development3 lectures • 13min

Importance of Web Security3 lectures • 15min

Security Principles for Web Development4 lectures • 22min

OWASP Top 10 Vulnerabilities11 lectures • 1hr 20min

Software Testing for Security5 lectures • 24min

Best Practices for Secure Web Development4 lectures • 25min

Final Project3 lectures • 23min

Course Conclusion1 lecture • 1min

Requirements

Description

Who this course is for: