STARWEST 2024 Tutorial: Web Security Testing: The Basics and More

SEE PRICING & PACKAGES

Tuesday, October 3, 2023 - 8:30am to 12:00pm

Web Security Testing: The Basics and More

Web applications are often security critical or serve as front-ends for security critical applications, making web testing for vulnerabilities an essential part of software testing. Unfortunately, most software testers have not been taught how to identify web security issues while testing applications. Join Tom Stiehm as he shares what you need to know to security test web-based applications as part of your overall testing process. Learn about the most common web security vulnerabilities and how they are introduced into web code and exploited by hackers. Explore test techniques for ensuring that common security features are tested; learn how to identify key security risks within web applications; and find about about security testing techniques and tools to mitigate them. See examples of common web security vulnerabilities and how to identify them. Take home a compendium of tools and techniques to test the security of your web applications going forward.

Tom-Stiehm
Coveros

Tom Stiehm has been developing applications and managing software development teams for over twenty years. As CTO of Coveros, he is responsible for the oversight of all technical projects and integrating new technologies and testing practices into software development projects. Recently, Tom has been focusing on how to incorporate DevSecOps and agile best practices into projects and how to achieve a balance between team productivity and cost while mitigating project risks. One of the best risk mitigation techniques Tom has found is leveraging DevSecOps and agile testing practices into all aspects of projects. Previously, as a managing architect at Digital Focus, Thomas was involved in agile development and found that agile is the only methodology that makes the business reality of constant change central to the process.