Tutorial topics to be covered include:

• Why security is important
• Common web application attacks (SQL and command injection, cross site scripting, cross site request forgeries, session fixation and hijacking, shared hosting issues). Where possible, each technique will be illustrated with a running example
• Techniques for defending against these attacks specifically
• General application construction principles--secure design from the ground up, secure coding practices
• Database configuration and design for security
• Case studies