Web Application Security Essentials

(U.S. EDT)
DAY: Tuesday & Wednesday
DATE: June 2 & 3, 2009
TIME: 9:00 a.m. - 5:00 p.m.
LOCATION: Baker Hall A51 (Giant Eagle Auditorium)

The ISO is sponsoring a two day course entitled "Web Application Security Essentials", conducted by Dr. Johannes Ullrich, Ph.D. of the SANS Institute.

The course, which is offered by the SANS (SysAdmin, Audit, Network, Security) Institute, will help you understand the fundamentals behind Web vulnerabilities which will enable you to properly defend your organization's Web assets.  Mitigation strategies from an infrastructure, architecture and coding perspective will be discussed alongside real-world implementations that really work.  The key security problem areas of Web applications will be covered.  Focus will be maintained on security strategies rather than coding level implementations.

Web Application Security Essentials is particularly well-suited to application security analysts, developers, application architects, pen testers who are interested in recommending proper mitigations to security issues, and infrastructure security professionals who have an interest in better defending their Web applications.

The instructor, Dr. Johannes Ullrich, Ph.D., is a Chief Research Officer for the SANS Institute.   Dr. Ullrich is currently responsible for the SANS Internet Storm Center (ISC) and the GIAC Gold program. He founded DShield.org in 2000, which is now the data collection engine behind the ISC. His work with the ISC has been widely recognized, and, in 2004, Network World named him one of the 50 most powerful people in the networking industry. Prior to working for SANS, Dr. Ullrich worked as a lead support engineer for a web development company and as a research physicist.  Dr. Ullrich holds a Ph.D. in Physics from SUNY Albany and resides in Jacksonville, Florida.

The course will be offered at a special discount price of $400 per student for Carnegie Mellon staff, state and educational institutions.  Course registration is through the SANS course registration website at https://www.sans.org/onsite/details.php?nid=19038.