Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CodeSignal

A04: Insecure Design

via CodeSignal

Go to class Write review

Overview

This course explores design flaws that lead to security vulnerabilities in our pastebin application—from insecure credential recovery to flawed business logic and missing audit trails.

Syllabus

  • Unit 1: Insecure Design Fundamentals
  • Unit 2: Insecure Credential Recovery
    • Exploiting Weak Password Recovery Mechanisms
    • Implementing Secure Token Based Recovery
    • Completing the Secure Password Reset Flow
    • Securing Token Generation with Cryptography
  • Unit 3: Anti Bot Review Protection
    • Crafting a Realistic Bot Attack
    • Implementing Rate Limiting Defense Mechanism
    • Requiring Email Verification for Review Submissions
    • Creating the Email Verification Endpoint
  • Unit 4: Snippet Quota Security
    • Single Strike Storage Exhaustion Attack
    • Implementing Snippet Size Validation
    • Implementing Per User Storage Quotas
  • Unit 5: Audit Trails for User Changes
    • Implementing Audit Trails for User Updates
    • Querying Audit Trails for Investigation
    • Testing Audit Trail System Effectiveness

Reviews

Start your review of A04: Insecure Design

Go to class

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.