Mike Andrews Releases Free Web and Application Security Series

I first met Mike Andrews about 3 years ago at a big Black Hat party. Turns out we both worked in the concert business at the same time. Despite being located nowhere near each other, we each worked some of the same tours and had a bit of fun swapping stories.

Mike managed to convince his employer to put up a well-designed series of webcasts on the basics of web and web application security. Since Mike wrote one of the books, he's a great resource.

Here's Mike's blog post, and a direct link to the WebSec 101 series hosted by his employer (he also gives out the slides if you don't want to listen to the webcast).

This is 101-level stuff, which means even an analyst can understand it.

—Rich