RE: WebAppSec Training Courses in UK

[Glyn Geoghegan <glyn.geoghegan () corsaire com>]

You also need to determine whether the training you want is
1/ Architecting secure applications
2/ Building secure applications
3/ Application Security Assessments (pentesting)

Each has a very different target audience, and its own set of concerns.  

Secure application architecture can involve broad concepts (e.g. using
proper input validation, building a tiered structure of least privilege) or
specifics (e.g. secure .Net design).  

Building secure apps could start with pseudo code examples of important
programming concepts and drill down into specific languages with their pros
and cons.

Application Security Assessments could take an application slant on more
typical ethical hacking type courses.

I believe @Stake, ISS and Defcom provide Application courses in the UK.
http://www.atstake.com/services/education/courses.html

Glyn.

> -----Original Message-----
> From: Dan Cuthbert [mailto:dan () idsec com] 
> Sent: 02 December 2002 21:57
> To: phuc4 () hushmail com
> Cc: webappsec () securityfocus com
> Subject: Re: WebAppSec Training Courses in UK
>
>
> i think the problem is finding a trainer that understands the 
> problems associated with web applications and security. also 
> the trainer that is providing the training would need to have 
> one helluvah understanding of security\building applications 
> and the whole process
>
> its a lovely idea... hmmm yeah i can see a owasp opportunity here
>
>
>
> * phuc4 () hushmail com (phuc4 () hushmail com) wrote:
> > I have unsuccessfully been looking for any decent WebAppSec 
> training 
> > courses in the UK.
> >
> > It seems that courses are more on the networking side of things or 
> > when restricted to either specific technologies like J2EE 
> or .Net but 
> > I have yet to find a useful technology independent course 
> that takes 
> > in the wider picture as well as the grimey details.
> >
> > Any ideas?
> >
> > Maybe OWASP could start doing training courses?
> >  
> >
> >
> >
> > Concerned about your privacy? Follow this link to get
> > FREE encrypted email: https://www.hushmail.com/?l=2
> >
> > Big $$$ to be made with the HushMail Affiliate Program:
> > https://www.hushmail.com/about.php?subloc=affiliate&l=427


----------------------------------------------------------------------
CONFIDENTIALITY:  This e-mail and any files transmitted with it are
confidential and intended solely for the use of the recipient(s) only.
Any review, retransmission, dissemination or other use of, or taking
any action in reliance upon this information by persons or entities
other than the intended recipient(s) is prohibited.  If you have
received this e-mail in error please notify the sender immediately
and destroy the material whether stored on a computer or otherwise.
----------------------------------------------------------------------
DISCLAIMER:  Any views or opinions presented within this e-mail are
solely those of the author and do not necessarily represent those
of Corsaire Limited, unless otherwise specifically stated.
----------------------------------------------------------------------

Corsaire Limited, 3 Tannery House, Tannery Lane, Send, Surrey, GU23 7EF
Telephone: +44(0)1483-226000  Email:info () corsaire com