DPC2017: Beating the pentester – Boy Baukema
https://www.ispeech.org/text.to.speech
You've done it, completed the project, on time and within the budget!
Now the customer says we need to have this audited by a security firm. Uh oh... what will he find? What impact will the results have on our deadlines?
In this talk we will examine what it takes to build security in with development and beat the pentester.
We'll cover topics like Threat Modelling, Validation, Encoding and Defense in Depth with real world vulnerabilities and practical examples in an Agile context. And learn how to remediate those vulnerabilities by using best practices.
You'll walk away with useful principles, practices and techniques to improve the security of your applications.
This talk was given at the Dutch PHP Conference in 2017, organised and hosted by Ibuildings. Visit http://phpconference.nl or http://www.ibuildings.nl for more information.
2017-11-06 10:35:01
source
Gloss