Working in a dynamic, lab-intensive hands-on coding environment students will learn to:

• Understand potential sources for untrusted data
• Understand the consequences for not properly handling untrusted data such as denial of service, cross-site scripting, and injections
• To test web applications with various attack techniques to determine the existence of and effectiveness of layered defenses
• Prevent and defend the many potential vulnerabilities associated with untrusted data
• Understand the vulnerabilities of associated with authentication and authorization
• To detect, attack, and implement defenses for authentication and authorization functionality and services
• Understand the dangers and mechanisms behind Cross-Site Scripting (XSS) and Injection attacks
• To detect, attack, and implement defenses against XSS and Injection attacks
• Understand the concepts and terminology behind defensive, secure, coding
• Understand the use of Threat Modeling as a tool in identifying software vulnerabilities based on realistic threats against meaningful assets
• Perform both static code reviews and dynamic application testing to uncover vulnerabilities in Java-based web applications
• Design and develop strong, robust authentication and authorization implementations within the context of JEE
• Understand the fundamentals of XML Digital Signature and XML Encryption as well as how they are used within the web services arena
• To detect, attack, and implement defenses for both RESTful and SOAP-based web services and functionality
• Understand techniques and measures that can used to harden web and application servers as well as other components in your infrastructure