Learn · CERN

Talk2 h

Web security / penetration testing: introduction

Sebastian Lopienski · CERN

Watch At CERN

About

COMPUTER SECURITY SERIES - @CERN

In order to protect computers and networks from malicious attacks, we need to find and fix any vulnerabilities before they are identified and exploited by the bad guys (Black Hats). One of the ways to achieve it is to do penetration (security) testing. To do this efficiently, the good guys (White Hats) have to think and act as the bad guys - but with the ultimate goal of securing the target rather than abusing it.

In this and the following seminar, you will learn to think and act like a White Hat penetration tester. We will focus on web applications, as these are the most common targets in any organisation.

The introduction to web security penetration testing will cover ethics and rules, remind how HTTP protocol works, demonstrate briefly some web applications server-side vulnerabilities, and demonstrate how client-side tools can help in penetrating testing.

Hands-on exercises

In order to access the hands-on exercises, please subscribe to whitehat-exercise-access egroup (available for CERN accounts owners only).

About the speaker

Sebastian Lopienski serves as CERN's deputy Computer Security Officer. He is also the director of the CERN School of Computing.

Computing Seminar: Web security series: https://cern.zoom.us/j/95038883222?pwd=NFEyU2Q0UGhYdU9kRDdFRHZ2N3ZnZz09

The talk

  1. Web security / penetration testing: introduction 2021-01-12 · 2 h · CERN's player

Credits and licence

Institution
CERN
Department
CERN Computing Seminar
Speaker
Sebastian Lopienski
Year
2021
Language
English
Subjects
Computer science
Source
CERN
Licence
CERN, as CERN states it. CERN's terms
Attribution
© CERN. CERN provides its audiovisual media free of charge for educational and informational use, credited to CERN; this lecture is shown in CERN's own player.
Who can watch
CERN gives no rating. Invisible Network shows it to Tweens profiles and older, judged from what the source says about it. How courses are placed