Threat Modelling & Web Application Security

Threat Modelling & Web Application Security

Learn how to protect your web application from vulnerabilities and common attacks 

Who Should Attend?

Organisations who would want to understand more about how to protect themselves from online attack.  

Course Duration

1 Day

Course Overview

The course is centred around the principle of understanding, documenting and modelling threats and mitigations. Each element of the course provides sections for discussion, demonstrations, examples and extensive use of practical elements. These are then linked back to the data flow diagram and threat model. The course also examines problems commonly found in situations like corporate intranets, cloud deployments and open source projects.

Course Outputs

By the end of the course, delegates will be able to 
  • Identify and fix security flaws that exist both within their own code and within the environment into which it will be deployed.
  • Learn the important questions to ask when evaluating security risks
  • Learn how to model your designs in a way that exposes potential attacks
  • Learn how to think from the perspective of an attacker
  • Be able to mitigate the most common attack vectors, produce designs that expose the smallest possible target to attackers, conduct audits and code reviews.
Course Conduct

During the course delegates will work with some of the common tools used by potential attackers and understand how to test applications for security issues.  The delivery is highly interactive and practical, with delegates spending a significant portion of their time compromising the sample applications. It includes a comprehensive, guided and fast paced leaderboard session (‘capture the flag’) which assists with cementing the previous exercises by exploring and practising penetration & security testing techniques.

"Darkskope revolutionised Business Continuity & Crisis Management throughout the  Group.  I can say this with absolute confidence as all the planning, exercising & training was put severe test during our response to dealing with COVOID-19. Our business was proven to be highly resilient and all staff were competent & confident, from the Board level through to individual sites"

Mike D

Group HR & Business Improvement Director, Manufacturing Company, United Kingdom
"Darkskope worked seamlessly and tirelessly to understand our business and design a resilience solution that worked throughout the business.  They handled all aspects from Health & Safety, Business Continuity & Crisis Management, which lifted the heavy burden from our staff.  Everyone in the business has been trained and is very comfortable with their roles & responsibilities"

Mark L

Chief Executive Officer, Major International Sporting Institution, UK, Europe & UAE
"The Smart-Resilience system by Darkskope changed the game for our business in planning for business continuity & crisis management.  Beforehand, this was an area of the business that no-one wanted responsibility for.  Now, all our documentation, exercising & competence training is easily managed and delivered.  Simple & powerful."

Blair W

Founder & CEO, Global Agri-Manufacturing Company, Alberta Canada & Dubai, United Arab Emirates

Book a consultation

Have a question? We’re here to help. Send us a message and we’ll get be in touch.

Share by: