Application Security

Welcome to Application Security, but before we start let's learn a little about who I am and the history of application security.

In this lesson we will go over who is OWASP and talk about the OWASP Top 10 and recommendations/best practices to mediate them.

In this lesson we will go over techniques used to conduct penetration testing on a web application.

In this lesson we will go over Static Application Security Testing and how to read/modify them.

In this section we are going to focus on report writing and how to calculate severity using CVSS v3.1.

We learned how to find and document all vulnerabilities, but we are not done just yet. Now we need to focus our efforts on communicating with the development and QA teams to achieve a more secure app.