Teaching Web Security Using Portable Virtual Labs

We have developed a tool called Secure WEb dEvelopment Teaching (SWEET) to introduce security concepts and practices for web application development. This tool provides introductory tutorials, teaching modules utilizing virtualized hands-on exercises, and project ideas in web application security. In addition, the tool provides pre-configured virtual computer for laboratory exercises. This paper described the design of the tool and the resources it offers to instructors. We also discussed a hands-on course module on cryptography.