Academic Integrity: tutoring, explanations, and feedback — we don’t complete graded work or submit on a student’s behalf.

read, and submit a review. The review should be about 300 words (a full page doc

ID: 3898869 • Letter: R

Question

read, and submit a review.

The review should be about 300 words (a full page document). Please organize and elaborate your points. If you feel you need more than 300 words - you are free to do so (but make sure your points are not off-tangent). You will not get extra points for writing a mini-novel. Your grade is based on how well you synthesize the points in the article (including how you express your opinion, thoughts or understanding).

This dropbox utilizes an originality checker that will detect copied text. In your review, briefly summarize the article, provide things that you learned from the article, and then explain how the article might help you in your cyber security career. Since quality written communication skills are required in all cyber-related vocations, spelling and grammar will be graded in this assignment. Please insure that your review is written according to the highest grammatical standards.

New Pluralsight Course: OWASP Top 10, 2017

Just a tad over 5 years ago, I released my first ever Pluralsight course - OWASP Top 10 Web Application Security Risks for ASP.NET. More than 32k people have listened to more than 78k hours of content in this course making it not just the most popular course I've ever released, but also keeping it as my most popular in the library even today by a long way. Developers have a huge appetite for OWASP content and I'm very happy to now give them even more Top 10 goodness in the course I'm announcing here - Play by Play: OWASP Top 10 2017.

This time, I've teamed up with Andrew van der Stock who was an integral part of the team involved in putting the 2017 edition of the Top 10 together.

I can't think of anyone who understands this resource better than him and frankly, it's a bit of a coup for us to have convinced Andrew to do this course. He's added awesome insight including why XSS is now so much further down the list, why CSRF has dropped off entirely and why we now have XXE and insecure deserialisation in the Top 10 for the first time. Plus, he's got some general insights into the changing infosec landscape, for example how the emergence of microservices has meant internal apps that had never previously seen the light of day are now being exposed to risks they'd never seen before.

Because this is a "Play by Play" course, it's only an hour and 12 minutes of easy listening. It's a conversation between Andrew and myself and, of course, we do get into some technical detail but it's designed to be the sort of thing you can watch over lunch, on the daily commute or even just listen to without the video. I've done a heap of these in the past and they've all been well-received so I hope this one goes down equally well.

Oh - and just to save you saying it - yes, I sound terrible. We recorded this in San Francisco in March and I'd just come from a week in Seattle followed by a keynote in Vegas and just got myself run down. But regardless, I battled through and I hope you enjoy the fruits of the labour in this latest course. Play by Play: OWASP Top 10 2017 is now live!

Explanation / Answer

Plural sight is one of the well-known website where professional study different courses or they can upload their courses. The first course released OWASP Top 10 Web Application Security Risks for ASP.NET.The course have become a most popular video as it was viewed by more than 32k people and also the course was listened for 78k hours.OWASP is one of the top viewed courses. Keeping that in mind this time teamed with Andrew van der Stock who helped making the 2017 edition of the Top 10 together. Andrew is one of the best in the field this is because he was able jot down the reasons for why XSS is now so much further down the list, why CSRF has dropped off entirely and why we now have XXE and insecure deserialization in the Top 10 for the first time. Plus, he's got some general insights into the changing InfoSec landscape. All the materials which are written down are based on how it can be used mostly. Hats why the Play by Play course was designed keeping this all in mind. As this OWASP is becoming a booming technology for the developers circle so the course has been designed all the important points and facts regarding it. Still they were discussing about the Play by Play course as they were talking about some technical details. The videos are designed such that it can be viewed over just like over lunch. Keeping all this in mind they are keeping all it in pace as this course is about to go live for everyone.