{"id":2062,"date":"2011-04-25T09:05:08","date_gmt":"2011-04-25T17:05:08","guid":{"rendered":"http:\/\/blog.mozilla.org\/webappsec\/?p=71"},"modified":"2011-04-25T09:05:08","modified_gmt":"2011-04-25T17:05:08","slug":"mozilla-brings-web-application-security-to-university-students","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/security\/2011\/04\/25\/mozilla-brings-web-application-security-to-university-students\/","title":{"rendered":"Mozilla Brings Web Application Security To University Students"},"content":{"rendered":"<p>Over the weekend Mozilla led an open source boot camp at Stanford University with a great lineup of courses including a hands-on web security lab where students performed actual exploits against a vulnerable web application.<\/p>\n<p>The goal of the web security workshop was to educate students about top security threats facing today\u2019s web applications. By allowing students to perform exploits themselves, the students were able to fully grasp both the impact of these weaknesses and also the ease at which an attacker could compromise a vulnerable application. The combination of the lab actives and secure coding principles provided the next generation of computer scientists with the skills to better understand web application threats and the importance of building security into their applications.<\/p>\n<p>Unlike a traditional presentation where there is one speaker and many listeners, the web security workshop leveraged a <a title=\"OWASP BWA\" href=\"https:\/\/www.owasp.org\/index.php\/OWASP_Broken_Web_Applications_Project\">vulnerable web application<\/a> platform created by <a href=\"http:\/\/www.owasp.org\">OWASP<\/a> that enabled students to perform actual exploits against a running web application.<\/p>\n<p>The workshop addressed four prominent web application security issues:<\/p>\n<ul>\n<li>cross site scripting<\/li>\n<li>access control<\/li>\n<li>SQL injection<\/li>\n<li>cross site request forgery<\/li>\n<\/ul>\n<p>The event was structured to provide each student with an understanding of the vulnerability, knowledge of the impacts and risks the vulnerability poses to users, the ability to exploit the vulnerability within a running application, and the secure design patterns necessary to avoid these weaknesses in their own applications.<\/p>\n<p>The web security workshop was a great success and received very strong feedback from the students.\u00a0 Students particularly enjoyed the lab element that allowed them to put the new skills they&#8217;d just learned into use.<\/p>\n<p>The<a title=\"WebAppSec Deck\" href=\"http:\/\/people.mozilla.org\/~mcoates\/WebAppSec-Training.html\"> full slide deck<\/a> and notes on <a title=\"Security Lab Setup\" href=\"http:\/\/people.mozilla.org\/~mcoates\/WebSecurityLab.html\">how to setup<\/a> the web security testing software are online for anyone that would like to work through the material on their own.\u00a0 Mozilla is hoping to conduct similar open source workshops at other universities around the world.<\/p>\n<p>&nbsp;<\/p>\n<p>Full List of Mozilla courses at the boot camp:<\/p>\n<ul>\n<li>7 Lessons from Mozilla &#8211; Pascal Finette &amp; Todd Simpson, Mozilla Labs<\/li>\n<li>Hacking the Firefox UI, Shawn Wilsher &amp; Frank Yan<\/li>\n<li>Managing Software at Internet Scale, Christian Legnitto<\/li>\n<li>Web Security, Hands on Learning, Michael Coates<\/li>\n<li>Frontend Development Foundations, Matthew Claypotch<\/li>\n<li>Scaling a Web Application, Jeff Balogh<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>Michael Coates<br \/>\nWeb Security Nomad<br \/>\n<a href=\"http:\/\/people.mozilla.org\/%7Emcoates\/\">http:\/\/people.mozilla.org\/~mcoates\/<\/a><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Over the weekend Mozilla led an open source boot camp at Stanford University with a great lineup of courses including a hands-on web security lab where students performed actual exploits &hellip; <a class=\"go\" href=\"https:\/\/blog.mozilla.org\/security\/2011\/04\/25\/mozilla-brings-web-application-security-to-university-students\/\">Read more<\/a><\/p>\n","protected":false},"author":1438,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[121],"tags":[],"coauthors":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Mozilla Brings Web Application Security To University Students - Mozilla Security Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/security\/2011\/04\/25\/mozilla-brings-web-application-security-to-university-students\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"mozilla\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/2011\/04\/25\/mozilla-brings-web-application-security-to-university-students\/\",\"url\":\"https:\/\/blog.mozilla.org\/security\/2011\/04\/25\/mozilla-brings-web-application-security-to-university-students\/\",\"name\":\"Mozilla Brings Web Application Security To University Students - Mozilla Security Blog\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/#website\"},\"datePublished\":\"2011-04-25T17:05:08+00:00\",\"dateModified\":\"2011-04-25T17:05:08+00:00\",\"author\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/70ae25c16f09d053c6d8b5eac29dbda9\"},\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/2011\/04\/25\/mozilla-brings-web-application-security-to-university-students\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/security\/2011\/04\/25\/mozilla-brings-web-application-security-to-university-students\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/2011\/04\/25\/mozilla-brings-web-application-security-to-university-students\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/security\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Mozilla Brings Web Application Security To University Students\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/security\/\",\"name\":\"Mozilla Security Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/security\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/70ae25c16f09d053c6d8b5eac29dbda9\",\"name\":\"mozilla\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/image\/98138a294cb6e19a68b02ef8ca9be2dc\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/75d2017e019c87560fe5d148a64659dc?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/75d2017e019c87560fe5d148a64659dc?s=96&d=identicon&r=g\",\"caption\":\"mozilla\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Mozilla Brings Web Application Security To University Students - Mozilla Security Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/security\/2011\/04\/25\/mozilla-brings-web-application-security-to-university-students\/","twitter_misc":{"Written by":"mozilla","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/security\/2011\/04\/25\/mozilla-brings-web-application-security-to-university-students\/","url":"https:\/\/blog.mozilla.org\/security\/2011\/04\/25\/mozilla-brings-web-application-security-to-university-students\/","name":"Mozilla Brings Web Application Security To University Students - Mozilla Security Blog","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/security\/#website"},"datePublished":"2011-04-25T17:05:08+00:00","dateModified":"2011-04-25T17:05:08+00:00","author":{"@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/70ae25c16f09d053c6d8b5eac29dbda9"},"breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/security\/2011\/04\/25\/mozilla-brings-web-application-security-to-university-students\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/security\/2011\/04\/25\/mozilla-brings-web-application-security-to-university-students\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/security\/2011\/04\/25\/mozilla-brings-web-application-security-to-university-students\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/security\/"},{"@type":"ListItem","position":2,"name":"Mozilla Brings Web Application Security To University Students"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/security\/#website","url":"https:\/\/blog.mozilla.org\/security\/","name":"Mozilla Security Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/security\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/70ae25c16f09d053c6d8b5eac29dbda9","name":"mozilla","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/image\/98138a294cb6e19a68b02ef8ca9be2dc","url":"https:\/\/secure.gravatar.com\/avatar\/75d2017e019c87560fe5d148a64659dc?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/75d2017e019c87560fe5d148a64659dc?s=96&d=identicon&r=g","caption":"mozilla"}}]}},"_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts\/2062"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/users\/1438"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/comments?post=2062"}],"version-history":[{"count":0,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts\/2062\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/media?parent=2062"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/categories?post=2062"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/tags?post=2062"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/coauthors?post=2062"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}