OWASP Top 10: #3 Sensitive Data Exposure and #4 External Entities (XXE)

Go to class
Write Review

Free Online Course: OWASP Top 10: #3 Sensitive Data Exposure and #4 External Entities (XXE) provided by LinkedIn Learning is a comprehensive online course, which lasts for Less than 1 hour of material. The course is taught in English and is free of charge. Upon completion of the course, you can receive an e-certificate from LinkedIn Learning. OWASP Top 10: #3 Sensitive Data Exposure and #4 External Entities (XXE) is taught by Caroline Wong.

Overview
  • Take a deep dive into the third and fourth categories of security vulnerabilities in the OWASP Top 10—sensitive data exposure and XML external entities (XXE).

Syllabus
  • Introduction

    • Prevent common software vulnerabilities
    1. Sensitive Data Exposure: How Does It Work?
    • General concept
    2. Impact of Sensitive Data Exposure
    • Example scenario 1
    • Example scenario 2
    3. Preventing Sensitive Data Exposure
    • Laws and regulations
    • Reducing scope
    • Encryption (TLS and HSTS)
    4. XXE: How Does It Work?
    • General concept
    5. Impact of XXE
    • Example scenario 1
    • Example scenario 2
    6. Preventing XXE
    • Disable XXE processing
    • Whitelisting and validating input
    • Upgrade all XML processors and libraries
    Conclusion
    • Next steps