Ein eLearning-System zur Unterstützung der Wissensvermittlung von Web-Entwicklern in Sicherheitsthemen

With the development of new internet technologies new security problems arise. Thus, it isimportant to consider security aspects during the complete development process of a web application.Every participant of such a process should have the appropriate knowledge. Classicallearning methods are not sufficient, because they are not able to satisfy the needs ofknowledge in the required topicality. As a consequence, we developed an eLearning applicationthat supports the transfer of this knowledge time- and location-independent. To get a deepunderstanding about security problems and the resulting vulnerabilities and attacks the applicationconsists of three complementing components. One component is a tool that provides allnecessary information about the security problems. The second component is a vulnerableonline banking application where the user can apply attacks in a virtual environment. Thethird component is a monitor application where one can inspect in real-time which informationthe attacker receives.