1. Web Application Security A Project X Course Date: Nov 1 th – 2 nd, 2010 Confidential Material

2. Introduction Name Shift Title/function Job responsibility Networking and database experience Web application development experience Security Experience Your expectations for the course 2

3. Rules of Engagement Class hours Building hours Parking Restrooms Meals Phones Messages Smoking Recycling 3

4. About this course Description Audience Course Prerequisites Course Objectives 4

5. Course Outline Module 1: Web Application Data Security Overview Module 2: The Web Server Module 3: Common Threats Module 4: Securing The Web Server Module 5: TLS and SSL Module 6: Patches and Security Updates Module 7: Firewalls and Port forwarding Module 8: Ticket Escalation 5

6. Setup Virtual MachineDescription WAS_Win2K8_FreshWindows Server without IIS WAS_Linux_FreshLinux Server without Apache WAS_SQL08Windows 2k8 with SQL 2008 WAS_MySQLLinux Server with MySQL 6

7. 7