Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CodeSignal

A04: Insecure Design

via CodeSignal

Go to class Write review

Overview

This course explores design flaws that lead to security vulnerabilities in our pastebin application—from insecure credential recovery to flawed business logic and missing audit trails.

Syllabus

  • Unit 1: Introduction to Insecure Design
  • Unit 2: Securing Password Recovery
    • Brute-Force Attack on Password Recovery Endpoint
    • Implementing Secure Email-Based Password Recovery
    • Implement Password Reset Endpoint
    • Implementing Secure Token Generation with SHA-256 Hashing
  • Unit 3: Securing Review Submissions
    • Demonstrating Bot Attack on Vulnerable Review System
    • Implementing Rate Limiting for Review Submission Protection
    • Implementing Email Verification for Review Submissions
    • Implement Email Verification Endpoint
  • Unit 4: Snippet Quota Management
    • Exploiting Storage with a Single Large Snippet
    • Implementing Maximum Snippet Size Validation
    • Implementing User Storage Quota Management
  • Unit 5: Implementing Audit Trails
    • Implementing Audit Logging for User Updates
    • Implement User Audit Trail Query Endpoint
    • Testing User Updates and Audit Trail Retrieval

Reviews

Start your review of A04: Insecure Design

Go to class

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.