Secure Node.js Development Training Course

Who should attend

This course is suitable for application developers, testers, architects, and anyone else involved in the production of Node deployments.

Prerequisites

Delegates should be comfortable navigating, and ideally writing JavaScript and/or TypeScript code. 

Live, instructor-led online and on-site training

This Node.js security course is available for private / custom delivery for your team - face-to-face, on-site at your location of choice, or remotely via MS Teams, Zoom or your own platform - get in touch to find out how we can deliver tailored training which focuses on your project requirements and learning goals.

Introduction to Application Security in Node.js

• Understanding OWASP in the context of Node.js
• Importance of Application Security in Node.js
• Common jargon in web security and their implications in Node.js

Exploring Key Organisations and Resources

• Overview of significant organisations in the web security domain (OWASP, MITRE, Snyk)
• Utilizing resources for Node.js application security

In-depth Modules
Headers and Content Security Policy

• Implementing secure headers in Node.js applications
• Understanding and configuring Content Security Policy (CSP)
• Strategies to prevent common security breaches via headers

Cross-Origin Resource Sharing (CORS)

• Understanding CORS in the context of Node.js
• Best practices for configuring CORS securely
• Hands-on exercises to implement and test CORS

Command Injection Vulnerabilities

• Identifying command injection vulnerabilities in Node.js
• Best practices to defend against command injection
• Hands-on exercises to understand and prevent these vulnerabilities

CVE Reports and Vulnerability Analysis

• Examining CVE reports relevant to Node.js
• Setting up test environments to replicate vulnerabilities
• Practical demonstrations of exploiting and mitigating vulnerabilities

Security Mental Models and Strategies

• Developing a security-focused mindset for Node.js development
• Ongoing strategies to ensure application security
• Best practices for regular security audits and updates

Summary and Conclusion

• Recap of key learnings
• Applying security knowledge in real-world Node.js environments
• Understanding the business impacts of insecure software

Throughout we’ll have

• Practical sessions to apply learned concepts
• Simulations of real-world security scenarios in Node.js
• Group discussions and analysis of famous security breaches