Networking and Web Security Deep Dive
The network stack from layers to proxies, and the web attacks every developer must recognise and prevent: XSS, CSRF, injection, SSRF, clickjacking and the OWASP Top 10.
5 lessons1 h 5 minIntermediate
0/5
What you'll learn
0 of 5 lessons complete
Who this is for and what you will be able to do
Who this is for
Developers who build web services and want a solid picture of how data travels, and of the main ways web applications are attacked and defended.
After this course you will be able to
- Explain the layered network model, TCP, UDP, ports and sockets
- Place proxies, NAT, VPNs and firewalls correctly in an architecture
- Recognise and prevent XSS, CSRF, SQL injection, SSRF and clickjacking
- Use JWTs, cookies, CORS and security headers correctly
- Apply the OWASP Top 10 as a design and review checklist
Topics it coversWeb SecurityDNSOAuthAll topics
How a lesson works
Interactive diagram
See how each component connects, then run a request through it.
Plain-words toggle
Switch between the technical explanation and a plain-language one.
Practice design
Change a design of your own in the builder and see how it holds up.
Quiz and exercise
Test your understanding before moving on.
Go deeper
These lessons are written from scratch. The books below are excellent next reads.
- High Performance Browser Networkingby Ilya Grigorikfree online; networking for web developers
- OWASP Top 10by OWASPhttps://owasp.org/www-project-top-ten/
- The Web Application Hacker's Handbookby Stuttard and Pintoclassic reference on web attacks