Deploying IT Infrastructure Solutions 2013
Introduction
This is short introduction for this great event.
Benefits for Students
Students have said that they would like more assignments what are more practical and related to real-life problems. Therefore we offer a week there they can put into good use the knowledge what they have solving real assignments. Student gets:
- International team-work experience
- Real assignment solving experience (real client, solid deadline)
- Honest evaluation of skills and knowledge
- Chance to work on tight schedule
- Nice line in CV and nice solution what can be shown in interviews
Requirements for Students
taotluse tekst
aaaaaaaaa bbbbbbbb
- ccc
Partners
IP Project Partners
Assignments Partners
Timetable
Arriaval
Assignments
Security testing of web application.
Description
Learn about the security of web applications. Find vulnerabilities from known vulnerable web applications. Find not known vulnerabilities of development version of web application Study Information Portal (Used by eleven universities of applied science in Estonia) File report that describes methods, tests and findings.
Expected outcome
Description of testing methods and findings (all vulnerabilities that students found in development environment) as testing report.
Expectations from students
Understanding web applications (What is difference of GET and POST, how sessions work, what is header etc). Knowledge of at least one web programming language (php, java, ruby, C#, python is preferred)
Lectures support
Several security related topics will covered during lectures and practical classes before starting actual testing. Lecture covers several attack types and vulnerabilities like SQL injection, cmd injection, XSS, CSRF etc. Practical classes based on DVWA (Damn Vulnerable Web Application) After lectures and practical classes students will get access to web application development environment for practical work.
Lecturer: Margus Ernits (Estonian IT College)