К содержимому
learnspaceYOUR NEXT CHAPTER
ПРОСТРАНСТВО ОБУЧЕНИЯ
ГлавнаяКаталог курсовМоё обучениеCoursera

Знания без границ

Учитесь у лучших университетов и компаний мира.

Открыть Coursera
Интеграция
Пространство университета
Моё пространствоСтраница курса
↵
ЯЛичный кабинетСтудент
© 2026 LearnSpaceКаждый день — возможность узнать больше.Помощь
Full-Stack Application Security · LearnSpace
Назад в каталог
courseraПрограммирование

Full-Stack Application Security

Курс от Coursera
Средний≈ 21.7 чАнглийский
О курсеНавыкиПрограммаПреподаватели

О курсе

Develop the skills needed to design, build, and protect secure modern web applications with the Full-Stack Application Security course. By completing this course, you will learn to identify common web vulnerabilities, apply secure coding practices, manage third-party dependency risks, and implement robust authentication and authorization mechanisms across applications and APIs. You will gain practical experience with input validation, output encoding, secure password storage, multi-factor authentication, secrets management, token-based security using JSON Web Tokens, and OAuth 2.0 client flows for third-party authentication. This course brings together expertise from Microsoft, NIIT, and Codio, offering learners multiple perspectives on application and API security. You will progress from understanding how attacks such as SQL injection, XSS, and CSRF occur, to applying hands-on techniques that protect web services and RESTful APIs in real-world scenarios. The curriculum is structured to build skills progressively, connecting foundational security concepts with advanced API and integration practices. Designed for learners with varying levels of prior experience, this course balances conceptual understanding with applied learning, preparing you to confidently secure full-stack applications and backend services in modern development environments.

Навыки, которые вы освоите

Restful APIFull-Stack Web DevelopmentWeb ApplicationsWeb DevelopmentData SecurityData ValidationOAuthJSONSecure CodingAPI DesignAuthenticationsAuthorization (Computing)Application Programming Interface (API)Vulnerability AssessmentsMulti-Factor AuthenticationEncryptionIdentity and Access ManagementApplication Security

Программа курса

6 модулей · 105 учебных материалов

01Start Here: Get Oriented and Check Your Skills2 материалов
Start Here: How This Skill-Based Course WorksЧтениеSkill Diagnostic: Find Your Recommended Starting PointЗадание
02Common Vulnerabilities (e.g., SQL Injection, XSS, CSRF)42 материалов

Information about Guided Labs and Other Tools

Completing the Guided LabsВидео

Учитесь у экспертов

Professionals from the Industry

Преподаватель курса

Full-Stack Application Security
В каталоге вашей программы

Инвестируйте в себя

Новые знания — в удобное для вас время.

Начать на Coursera

Обучение откроется на Coursera
в новой вкладке

Обучение на Coursera

≈ 21.7 ч

6 модулей

Язык: Английский

Субтитры: Арабский, Французский, Узбекский, Украинский, Китайский (Китай), Греческий, Итальянский, Бразильский португальский, Вьетнамский, Нидерландский, Корейский, Немецкий, Пушту, Русский, Тайский, Индонезийский, Шведский, Турецкий, Азербайджанский, Испанский, Хинди, Японский, Казахский, Венгерский, Польский

Часть программы вашего университета
Completing the Guided LabsЧтение
Microsoft Tools for Front-End DevelopmentЧтение
Introducing the AI Tool: Microsoft CopilotВидео

Introduction to Web Application Vulnerabilities

Introduction: Common VulnerabilitiesВидеоIdentifying Common Web VulnerabilitiesВидеоPractical Impact of VulnerabilitiesВидеоComparing VulnerabilitiesВидеоActivity: Vulnerability Comparison TableЗаданиеActivity: Vulnerability Comparison Table - Answer KeyЧтениеOverview of Common Web Application VulnerabilitiesЧтениеOverview of Common Web VulnerabilitiesЧтениеPractice Quiz: Introduction to Web Application VulnerabilitiesЗадание

SQL Injection

How SQL Injection WorksВидеоMitigating SQL InjectionВидеоImplementing SQL Injection MitigationВидеоActivity: SQL Injection Mitigation PracticeЗаданиеActivity: SQL Injection Mitigation Practice - Answer KeyЧтениеMitigating SQL Injection: Practical StrategiesЧтениеPractice Quiz: SQL InjectionЗадание

Cross-Site Scripting (XSS)

How XSS WorksВидеоMitigating XSS VulnerabilitiesВидеоXSS Exploitation and Mitigation in ActionВидеоActivity: Preventing XSS in a Sample ApplicationЗаданиеActivity: Preventing XSS in a Sample Application - Answer KeyЧтениеMitigating XSS: Input Validation and EncodingЧтениеPractice Quiz: Cross-Site Scripting (XSS)Задание

Cross-Site Request Forgery (CSRF)

How CSRF WorksВидеоMitigating CSRFВидеоDemonstrating CSRF Exploitation and MitigationВидеоActivity: Implementing CSRF Prevention in a Web ApplicationЗаданиеActivity: Implementing CSRF Prevention in a Web Application - Answer KeyЧтениеPractice Quiz: Cross-Site Request Forgery (CSRF)Задание

Mitigating Web Vulnerabilities

SQL Injection Case StudyВидеоXXS Injection Case StudyВидеоCSRF Case StudyВидеоAnalyzing and Mitigating Web VulnerabilitiesВидеоGuided Lab: Analyzing and Mitigating Web VulnerabilitiesPLUGINYou Try It! Analyzing and Mitigating Web VulnerabilitiesЛабораторнаяYou Try It! Analyzing and Mitigating Web Vulnerabilities - Answer KeyЧтениеPractice Quiz: Mitigating Web VulnerabilitiesЗаданиеConclusion: Common Vulnerabilities (e.g., SQL Injection, XSS, CSRF)Видео
03Secure Coding Practices and Input Validation40 материалов

Principles of Secure Coding

Introduction: Secure Coding Practices and Input ValidationВидеоOverview of Secure Coding PrinciplesВидеоSecure Development Lifecycle (SDL)ВидеоFoundations of Secure Coding: Key Principles and the SDLЧтениеPractice Quiz: Principles of Secure CodingЗадание

Implementing Input Validation

Types of Input ValidationВидеоImplementing Input Validation in CodeВидеоImplementing Input Validation in a Web Application - Guided Lab VideoВидеоGuided Lab: Implementing Input Validation in a Web ApplicationPLUGINYou Try It! Implementing Input Validation in a Web ApplicationЛабораторнаяYou Try It! Implementing Input Validation in a Web Application - Answer KeyЧтениеPractical Input Validation Techniques for Secure Web ApplicationsЧтениеPractice Quiz: Implementing Input ValidationЗадание

Encoding and Sanitization Techniques

Encoding TechniquesВидеоImplementing Encoding Techniques in CodeВидеоSanitization PracticesВидеоEncoding and Sanitization in a Web Application - Guided Lab VideoВидеоGuided Lab: Encoding and Sanitization in a Web ApplicationPLUGINYou Try It! Encoding and Sanitization in a Web ApplicationЛабораторная

Implementing Secure Authentication and Authorization

Authentication TechniquesВидеоAuthentication Techniques PasskeysВидеоAuthorization Techniques – Implementing Role-Based Access Control (RBAC)ВидеоImplementing Authentication and Authorization in a Web Application - Guided Lab VideoВидеоGuided Lab: Implementing Authentication and Authorization in a Web ApplicationPLUGINYou Try It! Implementing Authentication and Authorization in a Web ApplicationЛабораторная

Secure Data Storage and Transmission Techniques

Encryption Techniques for Secure Data StorageВидеоSecure Transmission With TLS/SSL ProtocolsВидеоSecure Data Storage and Transmission in a Web Application - Guided Lab VideoВидеоGuided Lab: Secure Data Storage and Transmission in a Web ApplicationPLUGINYou Try It! Secure Data Storage and Transmission in a Web ApplicationЛабораторнаяYou Try It! Secure Data Storage and Transmission in a Web Application - Answer KeyЧтение
04Securing REST API's using JSON Web Tokens and Oauth14 материалов

Context Setting

Context SettingВидео

3.1 Describe Authentication and Authorization

Describe Authentication and AuthorizationВидео

3.2 Introduce JSON Web Token(JWT)

Introduce JSON Web Token(JWT)Видео

3.3 Describe how JWT works

Describe how JWT worksВидео

3.4 Implement Authentication using JWT

Implement Authentication using JWTВидеоWatch and Repeat : Implementing JWTВидеоWatch and Repeat : Implementing JWT Part2ВидеоWatch and Repeat : Implementing JWT Part3Видео

3.5 Describe OAuth2

Describe OAuth2Видео

3.6 Build Secure Node.js Applications using OAuth2

Build Secure Node.js Applications using OAuth2ВидеоWatch and Repeat : GitHub AuthenticationВидеоWatch and Repeat : GitHub Authentication Part2Видео

Summary

Learning ConsolidationВидеоSecuring REST API's using JSON Web Tokens and OauthЧтение
05Best Practices for Web APIs5 материалов

Various API Topics

Copy of Navigating Codio AssignmentsЧтениеCopy of How to Reset an Assignment in CodioЧтениеVarious API Topics (optional download)Чтение

Security

Security (optional download)Чтение

OAuth

OAuth (optional download)Чтение
06Skill Assessment: Full-Stack Application Security2 материалов

Lesson

Learner Expectations for Skill AssessmentЧтениеFull-Stack Application SecurityЗадание
You Try It! Encoding and Sanitization in a Web Application - Answer KeyЧтение
Encoding and Sanitization Cheat SheetЧтение
Practice Quiz: Encoding and Sanitization TechniquesЗадание
You Try It! Implementing Authentication and Authorization in a Web Application - Answer KeyЧтение
Authentication and Authorization Best PracticesЧтение
Practice Quiz: Implementing Secure Authentication and AuthorizationЗадание
Encryption and Secure Transmission Reference GuideЧтение
Practice Quiz: Secure Data Storage and Transmission TechniquesЗадание
Conclusion: Secure Coding Practices and Input ValidationВидео