# Lecture 3: Web Application Security

- Institution: CERN
- Department: CERN openlab Summer Student programme 2013
- Speaker: Sebastian Lopienski
- Year: 2013
- Language: English
- Source: [CERN](https://videos.cern.ch/record/3013116)
- Licence: [CERN](http://copyright.web.cern.ch)
- Who can watch: Teens profiles and older (sources give no ratings; placed by Invisible Network from the source's own words)

Computer security has been an increasing concern for IT professionals for a number of years, yet despite all the efforts, computer systems and networks remain highly vulnerable to attacks of different kinds. Design flaws and security bugs in the underlying software are among the main reasons for this.

This lecture focuses on security aspects of Web application development. Various vulnerabilities typical to web applications (such as Cross-site scripting, SQL injection, cross-site request forgery etc.) are introduced and discussed.

Sebastian Lopienski is CERN's deputy Computer Security Officer. He works on security strategy and policies; offers internal consultancy and audit services; develops and maintains security tools for vulnerability assessment and intrusion detection; provides training and awareness raising; and does incident investigation and response. During his work at CERN since 2001, Sebastian has had various assignments, including designing and developing software to manage and support services hosted in the CERN Computer Centre; providing Central CVS Service for software projects at CERN; and development of applications for accelerator controls in Java. He graduated from the University of Warsaw (MSc in Computer Science) in 2002, and earned an MBA degree at the Enterprise Administration Institute in Aix-en-Provence in 2010. His professional interests include software and network security, distributed systems, and Web and mobile technologies..

0:00:00 Slide 1

0:01:48 Slide 2

0:03:03 Slide 3

0:03:08 Slide 4

0:04:23 Slide 5

0:05:09 Slide 6

0:05:32 Slide 7

0:05:35 Slide 8

0:05:56 Slide 9

0:06:05 Slide 10

0:06:15 Slide 11

0:06:21 Slide 12

0:06:26 Slide 13

0:06:43 Slide 14

0:07:38 Slide 15

0:08:24 Slide 16

0:08:27 Slide 17

0:08:37 Slide 18

0:08:53 Slide 19

0:09:02 Slide 20

0:09:06 Slide 21

0:09:29 Slide 22

0:09:42 Slide 23

0:10:30 Slide 24

0:10:44 Slide 25

0:10:47 Slide 26

0:11:13 Slide 27

0:11:16 Slide 28

0:12:10 Slide 29…

## Lectures

1. [Lecture 3: Web Application Security](https://invisiblenetwork.ai/learn/cern/3013116/32dca0d149e4), 1 h 8 min (CERN's player)