Learn essential cybersecurity practices for developers through real-world web application examples & develop secure APIs

What you'll learn

Learn best practices for securing APIs against common threats

Insights into secure coding practices

Identify key tools and techniques for API security assessment

Gain hands-on experience with real-world API security scenarios

Explore mitigation strategies for each OWASP vulnerability

Knowledge of security tools and frameworks used in the industry

Develop a robust API security strategy for your applications

Understand the importance of authentication and authorization in APIs

Learn how to perform effective security testing on APIs

Understand the OWASP API Top 10 vulnerabilities and their impact on security

Learn how to secure sensitive data in API responses

Explore the risks of improper CORS configurations in APIs

Understand the implications of using third-party APIs securely

Gain skills in implementing OAuth and JWT for API security

Discover how to handle API versioning securely

Learn about the security aspects of API design and architecture

Understand the role of security audits and reviews in API development

Get practical tips for threat modeling specific to APIs

Explore strategies for incident response in API security breaches

Strategies for continuous security monitoring and improvement

Requirements

Basic understanding of web development concepts

Familiarity with RESTful APIs and HTTP protocols

Knowledge of security principles is a plus but not mandatory

No specific tools are required; just a computer with internet access

A willingness to learn and explore API security topics

Description

In an increasingly interconnected world, cybersecurity is no longer a luxury—it's a necessity. Whether you're a developer, IT professional, or just starting your tech journey, understanding how to secure digital assets is essential to protecting your applications, data, and users.Welcome to the "Cybersecurity for Developers" course, your practical guide to mastering the essential principles of modern cybersecurity. Designed with real-world scenarios in mind, this course takes you beyond the theory and into hands-on, practical examples, focusing on web application security—one of the most vulnerable and commonly exploited areas today.Through engaging lessons, you'll gain an in-depth understanding of core security concepts like:Threat Modeling: Learn to anticipate potential threats and plan defenses before vulnerabilities are exploited.Web Application Security: Dive into common vulnerabilities in web apps, such as Cross-Site Scripting (XSS), SQL Injection, and Insecure Authentication, and how to secure against them.Secure Coding Best Practices: Discover how to write robust code that minimizes vulnerabilities from the start.Incident Response: Learn how to detect, react, and recover from security breaches with minimal impact.API Security: Gain insights into how to secure APIs, which are critical components of today's applications, drawing from the OWASP Top 10 for APIs.This course doesn't just teach you how to recognize and mitigate vulnerabilities—it empowers you to build secure applications from the ground up. By using real-world examples from web application development, you'll see exactly how these security measures apply in everyday scenarios, providing you with actionable skills you can implement immediately.Who should take this course?Developers: Looking to build and maintain secure applications, while understanding the threats they face.Security Enthusiasts: Eager to deepen your knowledge of cybersecurity in practical, real-world situations.IT Managers: Responsible for ensuring the security of applications and systems within their organization.Students and Beginners: New to cybersecurity and want a clear, practical introduction with real-world examples.By the end of this course, you'll not only understand the foundations of cybersecurity, but also be able to apply best practices in your daily work, ensuring that your applications are secure from today's most pressing threats.Why enroll in this course?Practical and hands-on: Learn from real examples and apply your knowledge in real-world scenarios.Focused on developers: Tailored to the needs of developers who want to secure their applications and APIs.Expert guidance: Receive step-by-step instruction from professionals with years of cybersecurity experience.Up-to-date content: Stay ahead of evolving threats with the latest security techniques and tools.Certificate of completion: Boost your credentials with a certificate you can proudly showcase.Cybersecurity is no longer optional—it's a critical skill that every developer needs. Enroll today and start protecting your applications from the threats of tomorrow!

Overview

Section 1: Introduction

Lecture 1 Communication plan

Lecture 2 Introduction to Cybersecurity and the Role of OWASP

Section 2: OWASP Top 10 2021

Lecture 3 OWASP Top 10: Overview

Lecture 4 Broken Access Control

Lecture 5 Cryptography Failures (Theory, Sensitive Data, Data Breach, Types of Failures)

Lecture 6 Cryptography Failures (Practical Examples, SQL Injections, TLS/SSL, HTTPS)

Lecture 7 Cryptography Failures (Examples, Password Encryption, Hashing, Salting)

Lecture 8 Injection (Overview, Fuzzing, CWEs, Impact, Injection Types, Command Injection)

Lecture 9 Injection (Cross Site Scripting, Types of XSS, SQL, JPA, NoSQL Injections)

Lecture 10 Injection (XPath Injection, Log Injection, Input Validation)

Lecture 11 Insecure Design (Overivew, CWEs, Shift Left Security, Threat Modeling Manifesto)

Lecture 12 Insecure Design (Secure Design Process, Security Controls, Metrics, Examples)

Lecture 13 Security Misconfiguration (Overview, CWEs, Types, Real-life attacks)

Lecture 14 Security Misconfiguration (Hardening, Zero Trust, Defense in Depth, Practice)

Lecture 15 Vulnerable & Outdated Components

Lecture 16 Identification & Authentication Failures

Lecture 17 Software & Data Integrity Failures

Lecture 18 Security Logging & Monitoring Failures

Lecture 19 Server-Side Request Forgery (SSRF)

Section 3: OWASP API Top 10 2023

Lecture 20 OWASP API Security Project & OWASP API Security Top 10 2023

Lecture 21 API1:2023 Broken Object Level Authorization - Part 1

Lecture 22 API1:2023 Broken Object Level Authorization - Part 2 (Practice)

Lecture 23 API1:2023 Broken Object Level Authorization - Part 3 (Zero-Trust, UUIDs)

Lecture 24 API2:2023 Broken Authentication - Part 1 (Basics, Impact, Types of Attacks)

Lecture 25 API2:2023 Broken Authentication - Part 2 (Case Studies, OAuth, OpenID)

Lecture 26 API2:2023 Broken Authentication - P.3 - (Practice, JWT Tokens, Timing Attacks)

Lecture 27 API3:2023 Broken Object Property Level Authorization - Part 1

Lecture 28 API3:2023 Broken Object Property Level Authorization - Part 2 (Practice)

Lecture 29 API4:2023 Unrestricted Resource Consumption - Part 1

Lecture 30 API4:2023 Unrestricted Resource Consumption - Part 2 (Practice)

Lecture 31 API5:2023 Broken Function Level Authorization - Part 1

Lecture 32 API5:2023 Broken Function Level Authorization - Part 2 (Practice)

Lecture 33 API6:2023 Unrestricted Access to Sensitive Business Flows - Part 1

Lecture 34 API6:2023 Unrestricted Access to Sensitive Business Flows - Part 2

Lecture 35 API6:2023 Unrestricted Access to Sensitive Business Flows - Part 3 (Practice)

Lecture 36 API7:2023 - Server Side Request Forgery

Lecture 37 API8:2023 - Security Misconfiguration

Lecture 38 API9:2023 Improper Inventory Management - Part 1

Lecture 39 API9:2023 Improper Inventory Management - Part 2 (Practice)

Lecture 40 API10:2023 Unsafe Consumption of APIs - Part 1

Lecture 41 API10:2023 Unsafe Consumption of APIs - Part 2 (Practice)

Section 4: Bonus section

Lecture 42 Bonus lesson

Developers looking to enhance their API security skills,Security professionals seeking to understand the latest API vulnerabilities,Software engineers interested in building secure applications,Students and beginners eager to learn about API security best practices,Tech leads and architects wanting to implement robust security measures in their projects,IT Managers and Team Leads: Professionals responsible for overseeing security measures in their organizations and ensuring best practices are followed.