|
SANS Institute is holding a training event in Copenhagen, on 25-30th April 2016, comprising two courses: SEC642 (Advanced Web App Penetration Testing and Ethical Hacking) and FOR508 (Advanced Digital Forensics and Incident Response).
SEC642 is led by Adrien de Beaupre, a member of the SANS Internet Storm Centre whose professional experience also includes technical instruction, vulnerability assessment, penetration testing, intrusion detection, incident response and forensic analysis.
Addressing the current threat landscape, de Beaupre warns: “The entire future of an organisation may only be one high-profile breach away from disaster.”
Problems in web apps are a likely cause of much of this risk. “Web applications are a major attack vector,” he said. “Businesses and business leaders need to understand this. SEC642 teaches the advanced skills needed to uncover and remediate vulnerabilities before criminals do.”
Such is a modern web app’s complexity, de Beaupre believes, security professionals need a very particular set of assessment skills.
The SEC642 training course, de Beaupre says: “Brings the advanced tools and techniques required to assess modern applications to the next level, going far beyond simple web application automated scanning.”
When they leave the classroom, students will be able to execute penetration tests against even the most complex web applications. Through numerous lab exercises, the course teaches hands-on skills such as:
* Identifying and attacking encryption
* Bypassing application firewalls
* Performing advanced attacks against common flaws such as XSS, SQL injection and Cross-Site Request Forgery
SANS Institute didn't offer any further details of the FOR508 course.
|
