Gain insights into enforcing web app security best practices, such as HTTPS, defending against XSS and clickjacking, managing HTTP cookies, and warding off DDoS attacks.

new.tar.gz

node

cookies

hsts

hsts-https

cookies-https

clickjacking

cors

There are more vulnerabilities than ever when creating applications for the web, so it is extremely important that software developers enforce security best practices such as, how to add protection through HTTP headers.

In this course, you will start off by learning how to prevent fraudulent SSL certificates from being served to clients, before moving on to how to defend against XSS attacks and clickjacking. 

In the latter half of the course, you’ll learn security practices related to HTTP cookies, and tips around security tradeoffs that you’ll make in your day-to-day work. Towards the end, you’ll learn how to ward off DDoS attacks, which is crucial when your application scales.

This course will demystify web security, and help you stay on top of important security-related concerns in your web apps.

Web Application Security for the Everyday Software Engineer

The traffic of a DOS attack comes from one source whereas that of a DDoS attack is generated from many sources. 

The traffic of a DOS attack goes to exactly one source whereas that of a DDoS attack goes to many sources. 

They are the same. The only difference is that DDoS attacks use less volumes of traffic. 

What is the difference between a DOS attack and a DDoS attack?

What is the difference between a DOS attack and a DDoS attack?

DDoS attackers have to generate _massive_ amounts of traffic to be effective.

DDoS attackers have to generate massive amounts of traffic to be effective.

It's best to handle DDoS attacks with the help of an external provider.

It’s best to handle DDoS attacks with the help of an external provider.

DDoS attacks are incredibly expensive for the attacker since they involve getting ahold of a great number of machines to execute the attack.

DDoS attacks are incredibly expensive for the attacker since they involve getting ahold of a great number of machines to execute the attack.

In this lesson, we'll take a short quiz on DDoS attacks.

Introduction

Understanding The Browser

HTTP

Protection through HTTP Headers

HTTP Cookies

Situationals

DDoS Attacks

Bug Bounty Programs

Conclusion

Quiz Yourself on DDoS Attacks