The course covers network fundamentals, vulnerabilities, and Application Security methods for web applications. Emphasis is placed on testing, reporting, and remediation guidance.
Language of course:
Ukrainian
Format of the event:
Online
Add to collection
you haven't created a collection yet
Add Collection
Course overview
Description generated based on course syllabus and open data.
The content focuses on web application security: from networking and HTTP/HTTPS to vulnerability discovery, AppSec tooling, and structured reporting. It includes threat modeling, secure development practices, and elements of compliance (PCI-DSS, HIPAA).
Who web application cybersecurity suits and when it does not (Application Security)
Suitable for
- Developers, QA, DevOps/SRE, and security analysts working with web applications.
- Those with programming skills seeking to systematize AppSec knowledge.
- Tech leads and engineers implementing security policies in SDLC.
Not suitable for
- Users without technical basics or programming skills.
- Those expecting quick results or employment guarantees.
- Those focused only on infrastructure security, not web application security.
Web security problems → learning outcomes (AppSec)
- Problem: Opaque session and authentication controls. Outcome: Understanding secure patterns (cookies, tokens, MFA) and their validation.
- Problem: Common OWASP Top 10 vulnerabilities. Outcome: Methods for detection, impact validation, and remediation guidance.
- Problem: Low-quality vulnerability reports. Outcome: Structured reporting with reproduction, CVSS, and prioritization.
- Problem: Fragmented tool usage. Outcome: Cohesive use of proxies (Burp/ZAP), DAST/SAST, and checks in CI/CD.
- Problem: No threat model. Outcome: Data-flow mapping and attack scenario definition.
Comparison with Application Security alternatives
- Self-study: Flexible, but high time cost for curating materials and methods.
- General cybersecurity courses: Broad coverage with limited web app–specific practice.
- Niche trainings (bug bounty only): Useful tactics without a systematic threat model and reporting.
Outcomes after studying web application cybersecurity (AppSec)
- Established understanding of networking, HTTP/HTTPS, authorization, and session management.
- Knowledge of OWASP Top 10 and secure coding practices for web apps.
- Hands-on familiarity with tools: HTTP proxies, DAST/SAST, dependency scanning.
- Use of penetration testing methodologies for web apps in a controlled environment.
- Threat modeling and risk documentation using CVSS.
- Preparation of clear technical reports and collaboration with development teams.
- Basic awareness of compliance requirements (e.g., PCI-DSS, HIPAA).
Course Description
Lecturer
Bogdan Serednitsky
Cyber Security Engineer в Ciklum, ex-Security Engineer в SoftServe
- 10 + years working in the field of information security- Created code security tools for a company with 61 + thousand specialists- worked with various tasks, including Penetration Testing, analysis of the client's mobile and web applications, conducting social engineering attacks, preparing the client for various types of compliance requirements (PCI-DSS, HIPAA)- developed and conducted cybersecurity training
Evaluation
Only authorized users can leave reviews and rate
Log in »
