Training Delivery & Duration

  • Live Online/ On-Site / Private Team Training
  • Theory and Hands-on Labs
  • 1 day

Secure Coding in Angular

Angular enables developers to build dynamic, responsive user interfaces. Understanding vulnerabilities, applying secure coding best practices, and protecting critical assets from cyber threats are essential to developing secure web applications.

Training Delivery & Duration

  • Live Online/ On-Site / Private Team Training
  • Theory and Hands-on Labs
  • 1 day

Do you have 5 or more attendees?

Contact Us about Team Training >>
bkg-decorativelines-big-white

About this course

About this course

Course Overview

Angular empowers developers to create highly interactive and responsive user interfaces. It is imperative that security is an integral part of the development process. Being aware of possible vulnerabilities, using best practices and ensuring that critical assets are safeguarded from cyber threats is essential to creating secure web applications.

Why Take this Course?

This course aims to equip Angular developers with the knowledge and skills to write secure applications by understanding and mitigating the vulnerabilities listed in the OWASP Top 10 2021, specifically within Angular applications. Through a mix of theoretical concepts and practical exercises, learners will be able to apply best practices for secure coding and ensure their Angular applications are robust against common security threats.

It is recommended that participants on the Secure Coding in Angular course have an understanding of Angular basics and familiarity with web development and security concepts. Please see Related Training at the end of this page.

Learning Objectives

Who Should Attend this Course?

The course is designed for:

  • Angular Developers
  • Web Developers transitioning to Angular
  • Security Professionals with an interest in web application security

Benefits

Attendee Testimonials

Course Outline

Introduction to Web Security & OWASP Top 10 2021

Web Security Fundamentals

  • Overview of OWASP Top 10 2021
  • The Role of Secure Coding in Angular Development

Broken Access Control

  • Deep dive into Broken Access Control
  • Implementing secure authorization in Angular
  • Securing routes and services in Angular

Injection

  • SQL, Template and HTML Injection vulnerabilities
  • How to identify and mitigate XSS and CSRF vulnerabilities
  • Angular best practices to prevent Injection vulnerabilities
  • Hands-on: DOM Cross-Site Scripting and Content Security Policy

Insecure Design

  • Introduction to Insecure Design
  • Designing Angular applications with security in mind
  • Hands-on: Applying design patterns for secure Angular applications

Security Misconfiguration

  • Common Angular security misconfigurations
  • Secure deployment practices for Angular apps
  • Hands-on: UI Redressing vulnerabilities

Vulnerable and Outdated Components

  • Risks associated with using vulnerable components
  • Managing dependencies in Angular projects
  • Hands-on: Outdated Package Causes Vulnerability in Angular

Identification and Authentication Failures

  • Securely managing user identities and authentication sessions
  • Maintaining state after authentication in Angular, OAuth2.0 Best Practices
  • Hands-on: Dangerous Open Redirect in Post-Login Navigation

Security Logging and Monitoring Failures

  • Importance of logging and monitoring for security
  • Implementing effective monitoring in Angular applications

Format

What is included?

Levels

Team Training with Cycubix

Team Training with Cycubix

Instructors

The minds behind the course

The minds behind the course

Fabio Cerullo

Senior Official ISC2 Authorised Instructor for CISSP, CCSP, CSSLP and SSCP

Fabio Cerullo, CISSP, CCSP, CSSLP, SSCP, is the Managing Director of Cycubix Ltd., where he leads cybersecurity consulting, compliance programs and professional training services for organisations across a wide range of industries. His work spans secure engineering, cloud security and guidance on major regulatory and certification requirements including ISO 27001, SOC2, FedRAMP, NIS2, PCI and GDPR.

He also serves as an ISC2 Senior Authorised Instructor, delivering advanced courses that help security and engineering teams build practical skills in cloud security, software security and information risk management. His cloud expertise is reinforced by his AWS Certified Solutions Architect and AWS Security Specialty certifications and hands-on experience advising organisations on secure architecture and cloud-native security practices.

He is an active contributor to the OWASP Foundation, regularly providing training, speaking at industry events and supporting community initiatives focused on modern application security. He volunteers as Google Summer of Code administrator, mentoring new students into the cybersecurity field and guiding them through their first contributions to open source security projects.

Originally from Argentina and now based in Ireland, he holds a master’s degree in computer engineering. His interests include emerging technologies, with a particular focus on AI risks and secure AI engineering. Outside of his professional work he enjoys spending time with his family, running outdoors, and actively supporting initiatives that aim to make high-quality cyber-security education accessible to a broader audience.

Show (Instructors)

The minds behind the course

The minds behind the course

Fabio Cerullo

Fabio Cerullo, CISSP, CCSP, CSSLP, SSCP, is the Managing Director of Cycubix Ltd., where he leads cybersecurity consulting, compliance programs and professional training services for organisations across a wide range of industries. His work spans secure engineering, cloud security and guidance on major regulatory and certification requirements including ISO 27001, SOC2, FedRAMP, NIS2, PCI and GDPR.

He also serves as an ISC2 Senior Authorised Instructor, delivering advanced courses that help security and engineering teams build practical skills in cloud security, software security and information risk management. His cloud expertise is reinforced by his AWS Certified Solutions Architect and AWS Security Specialty certifications and hands-on experience advising organisations on secure architecture and cloud-native security practices.

He is an active contributor to the OWASP Foundation, regularly providing training, speaking at industry events and supporting community initiatives focused on modern application security. He volunteers as Google Summer of Code administrator, mentoring new students into the cybersecurity field and guiding them through their first contributions to open source security projects.

Originally from Argentina and now based in Ireland, he holds a master’s degree in computer engineering. His interests include emerging technologies, with a particular focus on AI risks and secure AI engineering. Outside of his professional work he enjoys spending time with his family, running outdoors, and actively supporting initiatives that aim to make high-quality cyber-security education accessible to a broader audience.