Because of this, HTML5 is and will continue to be used for decades to come, says Infosec Skills author Robert Morel. “HTML5 is the backbone of modern web applications. It is a rolling standard, so it’s not going anywhere. It just gets updated,” says Morel, who is a SecOps Engineer for a top cryptocurrency futures exchange. “By learning HTML5 security, you’re learning a skill which is going to last you for the better part of your career.”

Learn HTML5 security from an expert 

A computer science graduate from Anglia Ruskin University in the UK, Morel began his career as a developer and found himself getting more involved in operations and security. HTML was the bridge between those two worlds.  He built his first website while in college, a static HTML site advertising a plumber. By the time he graduated, he had a team of five specializing in developing angular single-page applications and training courses. Since then, he has worked with fintech and blockchain, becoming an expert in developing secure and hardened web applications. Through this, he also became an experienced security researcher, ethical hacker and fintech author and blogger.

Why learn HTML5 security? 

“There are three languages that are key to a webpage. HTML5 is the structure. CSS does the styling, and JavaScript makes it dynamic,” explains Morel. “Think of these three like building a house. The house is HTML5, the decorations are CSS, and then the plumbing and electricity, that’s JavaScript. You have to know HTML5 to build the house.” Morel said that understanding HTML5 security is key to providing a first line of defense in your web applications.  “Nearly all web applications use HTML5 because it’s a living standard, meaning that there will be no new versions, only additions to the existing version. “The beautiful thing about HTML5 security is it’s like JavaScript functions. Instead of writing the functions, you just put this one word in the code to secure against all sorts of attacks,” explains Morel. “We get into this in this learning path.” He adds that studying and passing the HTML5 Security learning path will provide you with a solid foundation in web application security for the foreseeable future —and possibly the rest of your career.

Inside the HTML5 security training

Morel’s HTML5 Security Learning Path is broken down into five sections. The six-hour training provides a comprehensive understanding of securing HTML5 components so you can secure your web applications with confidence.

Introduction to HTML5 Security: Provides you with an introduction to HTML5 Security and its importance in web applications. HTML5 Elements: Breaks down HTML5 components and the reasons for their use in a web application. This knowledge will help you identify common areas of vulnerabilities, then offer solutions to prevent these from becoming attacks. Identifying Areas of HTML5 Vulnerability: Teaches you the most common types of attack arising from insecure HTML5 code and the methods used by hackers to exploit them. Web App Protection Using HTML5: Shows you how to analyze existing HTML5 code for security vulnerabilities and correct them.  HTML5 Security in the Wild: A Problem-Based Approach: A hands-on exercise to demonstrate what you’ve learned about HTML5 Security and resolving vulnerabilities in HTML5 code through a bug bounty program. Your job is to assess the reported security vulnerabilities and resolve them.

Who should learn HMTL5 security?

Morel says he’s targeted two groups of IT professionals for this learning path: developers early in their careers and the people who manage developers.  “I’m hoping that the course is accessible to managers, as well as junior security people who want to learn about web application security,” he said. “If you’re building a web app or a website, or even a mobile app, this course is going to cover everything that you need to know to secure that.” “If you’re going to do one learning path to learn about web application security, it’s going to be this one. It’s going to last you your whole career,” promises Morel.

Sources

What is HTML5, and why is it important?, Dotnek tech blog The significance of HTML5, Infoworld