Computing foundations
Security
The security basics every developer needs to know: cryptography, authentication, the most common web application vulnerabilities and how to avoid them.
Topics
Encryption
AES, DES, Symmetrical, Asymmetrical, RSA
Hashing
MD5, SHA256, HMAC, Signatures
Encoding
Base64
Authentication & Authorization
Definitions, Basic Authentication, Token Authentication, JWT, OAuth, Single Sign-On, Password Based, API Keys, Access-Control Lists, Role-Based
CORS
OWASP Injection
SQL Injection, NoSQL Injection, ORM Injection
OWASP Broken Authentication
OWASP Sensitive Data Exposure
OWASP Broken Access Control
OWASP Insecure Deserialization
OWASP Components with Known Vulnerabilities
OWASP Insufficient Logging & Monitoring
Resources
- Foundations of Security - What Every Programmer Needs to Know
Book · Christoph Kern, Anita Kesavan, Neil Daswani, Apress, 2007 · Chapters: 1 · 24 pages
- Authentication vs Authorization
Article · 4 pages
- An OAuth 2.0 introduction for beginners
Article · 16 pages
- Introduction to JSON Web Tokens
Article · 7 pages
- How CORS (cross-origin resource sharing) works
Article · 3 pages
- CORS Introduction for Beginners
Article · 6 pages
- OWASP Injection
Article · 2 pages
- OWASP Broken Authentication
Article · 2 pages
- OWASP Sensitive Data Exposure
Article · 2 pages
- OWASP Broken Access Control
Article · 2 pages
- OWASP Security Misconfiguration
Article · 2 pages
- OWASP Cross-Site Scripting
Article · 2 pages
- OWASP Insecure Deserialization
Article · 2 pages
- OWASP Using Components with Known Vulnerabilities
Article · 2 pages
- OWASP Insufficient Logging & Monitoring
Article · 2 pages
- Foundations of Security - What Every Programmer Needs to Know
Book · Christoph Kern, Anita Kesavan, Neil Daswani, Apress, 2007