Session 69 Slide 1: Security Basics: Secure Web Applications

Review of the previous session

Session 28: Introduction to Docker

• Basic Concepts of Container Technology: Differences from virtualization, advantages of containers
• Basic Docker Operations: Creating and managing images and containers
• Dockerfile: How to create custom images
• Docker Compose: Collaborative management of multiple containers

# Example of commands learned last time
docker build -t myapp .
docker-compose up -d

What you will learn this time

In this lecture, you will systematically learn about Web application security.

Learning Topics

1. XSS (Cross-Site Scripting) Countermeasures
2. CSRF (Cross-Site Request Forgery) Countermeasures
3. SQL Injection Countermeasures
4. Implementation of JWT Authentication (Newly Added)