Obsah kurzu Security landscape overviewIndustry trends, The "Browser Wars", relevant informationsources & keepingup-to-dateThe need for Security AnalysisIndustry Trends, Security Testing Methodologies (OSSTMM), Planning and SchedulingFoundations of SecurityFootprinting, Reconnaissance, Scanning, Enumeration, Sniffing, System Hacking, Trojans/Viruses/Worms, Cryptography, Denial of Service, Hacking Wireless Networks, Social Engineering, Cloud SecurityMITRE OverviewCVE & CVSS,CWE & CWSS, CAPEC, OVAL, MAEC, OASISAttacking Web Servers & Web ApplicationsFootprintingthe Web Infrastructure,Defense in Depth, Attacking Web Servers, Analyzing Web Applications, Authentication Mechanisms, Authorization Schemes,Session Management, Injection Attacks, Man-in-the-Middle Attacks, Data Connectivity, Web App Clients, Web ServicesOWASP Web Top 10Injection (A1), Broken Authentication and Session Management (A2), XSS/Cross-Site Scripting(A3), Insecure Direct Object References (A4), Security Misconfiguration (A5), Sensitive Data Exposure