Online Course – Certified Professional Internship in Secure Coding in Google’s Laravel and Infosec

Build with Laravel, a PHP framework. Create safe and secure apps and web pages with Laravel.

Suggested by: Coursera (What is Coursera?)

Professional Certificate

Beginners Intermediate level Advanced involved

No prior knowledge required

Time to complete the course

7-day free trial

No unnecessary risks

Skills you will acquire in the course

  • Communication skills
  • Problem-solving ability
  • Time management skills
  • Critical thinking
  • Teamwork
  • Technological skills
  • Initiative and creativity
  • Professional conduct
  • Self-learning ability
  • leadership

What you will learn in the course

Courses for which the course is suitable

  • PHP developer
  • Laravel developer
  • Information Security Specialist
  • Web application developer
  • Information Security Manager
  • Software developer
  • Information Security Analyst
  • Full Stack Developer
  • Backend developer
  • Application Security Specialist

Expertise – 3-part course series

With Laravel, the PHP framework, building websites and apps becomes faster and easier than ever. With all the tools, abstraction and speed, it’s easy to forget or ignore the issue of security. In this course, you’ll learn about some of Laravel’s built-in security features; best practices for securing your application; and practical code examples.

First part of the course

  • You will explore some of the most common ways to secure your Laravel application.
  • You will learn how to configure the application securely to reduce the risk of leaking secrets and credentials.
  • Validate user input and authentication methods.

Second part of the course

  • We will focus on controlling user access through gates and policies.
  • We will judge SQL injection attacks and session safety with usage limits.
  • If you continue to the end, you will earn a bonus section on static analysis, honey traps, and sensitive loops.

Hands-on Learning Project

In the course’s hands-on project, you will tackle seven challenges that you would encounter in a typical Laravel project. By the end of the course and project, you will be able to:

  • Analyze and evaluate a Laravel application for prominent security vulnerabilities.
  • Configure and create a safe app by default.
  • Suggest content that should be added to the Laravel application to increase the chance of catching malicious actors.

You will receive a free trial of access to the Infosec Skills platform to complete the project.

Details of the courses that make up the specialization

Laravel: Configuration, Authentication, and Authorization

Course 1 • 2 hours • 5.0 (10 ratings)

Course Details
What you’ll learn
  • In this beginner course on Arabella, we will look at what prerequisites you will need to get the most out of this specialization.
  • We will talk about different ways to install the Arabella framework and consider the safest choice.
  • We will also discuss security concerns related to using third-party packages.
  • The course will provide tips on how to audit your app after installing a third-party package.
  • Finally, we will share resources to keep you up to date with Arabella.
  • Securing configurations and secrets is one of the most important parts of your Arabel application.
  • The course will focus on the correct use of the configuration system, protecting environment secrets, and ways to enforce SSL for your Arabel application.
  • In addition, a log filtering and exception management system to reduce the risk of leaking sensitive information.
  • Authentication is the first half of securing user access to your Arabel app.
  • In this course, we will talk about how to perform user authentication in Arabella and why it is important.
  • We will discuss and examine Arabel’s built-in verification kits and clarify which kit is suitable for which use.
  • Even if you have unique authentication requirements, Arabel’s authentication system can be used, and we’ll see how with a custom authentication provider.
  • Authorization is the other half of securing user access to your Arabel application.
  • In this course, we will discuss the various built-in options that Arabelle offers to provide authority.
  • We will compare Gates, a simpler solution, with a more advanced policy system.
  • We will also demonstrate how to extend the authorization system with roles and permissions using a third-party package.
  • Finally, we will present the best principles for using delegation, including how to avoid common pitfalls.
Skills you will acquire
  • Category: Secure Encryption
  • Category: Computer Programming
  • Category: Cyber ​​Security
  • Category: Information Technology
  • Category: Arabella

Additional security in Arabbel

Course 2 • 2 hours

Course Details
What you’ll learn
  • This course focuses on ways to keep your database secure in Arabella.
  • It starts with supporting the security of requests and responses.
  • First, we’ll talk about how Arabel supports semantic request verbs while still being browser-friendly.
  • Next, we will examine tools for protecting against CSRF attacks and protecting against XSS.
  • Next, we’ll review best practices for implementing security-related headers in responses.
  • We will move on to two types of scanning tools that can be used in the Arabel application: development code scanning tools and hacker attack tools.
  • In this course, we will talk about which tools you should use to scan your code and configuration for software holes and attack methods.
  • In addition, we will discuss other tools that can be used against your website, so that you can learn to use them against yourself and protect yourself in advance.
  • This course also covers two ways to communicate with bad actors: honeypots and “inferno wires.”
  • We will discuss infernal threads, a function that matches specific restricted access and then actively notifies or blocks access.
  • We will also review Honey Readers, a feature that is connected to the app to monitor suspicious activity and report it later.
  • At the end of this learning path, we will talk about the next steps you should take to secure your Arabel app and stay connected to the community.
  • You will learn how to stay up to date and see what new security vulnerabilities exist and whether you are affected.
Skills you will acquire
  • Category: Database Security
  • Category: Computer Programming
  • Category: PHP
  • Category: Arabella
  • Category: Coding

Defenses in Arabbel

Course 3 • 1 hour

Course Details
What you’ll learn
  • In this course, you will examine how Arabbel protects your database and what ways you can set up to protect your system.
  • Arabella’s database access layer includes many built-in protections against common attacks.
  • However, when customization of functions is needed, it is sometimes easy to override this layer and enable attacks such as SQL Injection.
  • In this course, we will discuss how Arabbel protects your database and examine ways to extend functionality without compromising security.
  • Next, we will focus on performance and mitigating the risk of denial of service attacks.
  • Finally, we will focus on securing the properties in the Eloquent model.
  • The course also covers three related concepts that will be compared and analyzed.
  • We will clarify how to secure passwords in Arabel and ensure their complexity.
  • We will also discuss the placement functions and algorithms provided by Arabel.
  • We’ll talk about the use of hand-crafted encryption, as well as where it fits into OralBall.
  • Additionally, the course will discuss two mechanisms for tracking users between requests and storing user information: sessions and cookies.
  • First, we’ll discuss all the different session configurations and why they’re required.
  • We’ll review what’s really needed and what’s just hype.
  • Next, we will discuss the use of persistent session storage and temporary session data.
  • The course will conclude with a discussion on the use and security of cookies in Arabella.
  • Finally, the course will cover how Arabel provides a function to limit the number of incoming requests.
  • We will discuss reasons to choose to protect endpoints, both in general and with partitioned or conditional choices.
Skills you will acquire
  • Category: Database Security
  • Category: Computer Programming
  • Category: DBMS
  • Category: Arabella