Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CodeSignal

A04: Insecure Design

via CodeSignal

Go to class Write review

Overview

This course explores design flaws that lead to security vulnerabilities in our pastebin application—from insecure credential recovery to flawed business logic and missing audit trails.

Syllabus

  • Unit 1: Introduction to Insecure Design
  • Unit 2: Insecure Credential Recovery with Q&A
    • Simple Dictionary Attack on Password Recovery
    • Password Recovery: Token Generation
    • Password Recovery: Reset Implementation
    • Improving the Cryptography
  • Unit 3: Lack of Anti-Bot Verification in Review Submission
    • Simulating a Bot Attack
    • Implement Rate Limiting for Reviews
    • Enforce Email Verification for Reviews
    • Verify User Emails for Secure Reviews
  • Unit 4: Flawed Business Logic in Snippet Quota Management
    • Exploiting Storage with One Request
    • Implement Snippet Size Validation
    • User Quota Management System
  • Unit 5: Missing Audit Trails on User Modifications
    • Implementing Audit Logging for User Updates
    • Audit Trail Query Implementation
    • Audit Trail System in Action

Reviews

Start your review of A04: Insecure Design

Go to class

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.