OWASP Training and Certification in Kuala Lumpur, Malaysia

This course provides an in-depth understanding of OWASP principles, tools, and methodologies to enhance web application security. Participants will learn OWASP Top 10 vulnerabilities, security best practices, and hands-on techniques to identify and mitigate risks. The course covers threat modeling, secure coding, penetration testing, and real-world case studies to equip participants with essential cybersecurity skills.

Module 1: Introduction to OWASP

• Overview of OWASP and its mission

• Importance of web application security

• OWASP resources: Top 10, ASVS, ZAP, Cheat Sheets

Module 2: OWASP Top 10 Web Security Risks

• Understanding the most critical security vulnerabilities

• Deep dive into each risk, including real-world case studies

  1. Injection (SQL, NoSQL, OS, LDAP, etc.)
  2. Broken Authentication
  3. Sensitive Data Exposure
  4. XML External Entities (XXE)
  5. Broken Access Control
  6. Security Misconfiguration
  7. Cross-Site Scripting (XSS)
  8. Insecure Deserialization
  9. Using Components with Known Vulnerabilities
  10. Insufficient Logging & Monitoring

Module 3: Web Application Security Testing

• Introduction to penetration testing techniques

• Using OWASP ZAP (Zed Attack Proxy) and Burp Suite

• Security scanning, fuzzing, and exploit detection

Module 4: Secure Coding Best Practices

• Implementing secure authentication and authorization

• Preventing SQL Injection, XSS, and CSRF attacks

• Proper input validation and output encoding

Module 5: OWASP Tools and Resources

• Overview of OWASP Security Testing Guide (WSTG)

• Hands-on with OWASP Dependency-Check and OWASP ZAP

• Introduction to OWASP Threat Dragon for threat modeling

Module 6: Advanced Security Concepts

• API Security and OWASP API Security Top 10

• Mobile Security and OWASP Mobile Top 10

• Cloud Security and DevSecOps integration

Module 7: Real-World Case Studies and Hands-on Labs

• Analyzing major security breaches

• Hands-on exploitation and mitigation techniques

• Secure coding challenges and best practice implementation