Web Application Security Principles

[phlipper]

In this talk, we'll take a technology-agnostic look at some of the primary risks to web applications today.

Using the OWASP Top 10 list as a guide, we'll get a high-level overview of each of the following areas:

• Injection
• Broken Authentication and Session Management
• Cross-Site Scripting (XSS)
• Insecure Direct Object References
• Security Misconfiguration
• Sensitive Data Exposure
• Missing Function Level Access Control
• Cross-Site Request Forgery (CSRF)
• Using Components with Known Vulnerabilities
• Unvalidated Redirects and Forwards

For each category, we will:

• Assess the risk
• See how an attacker might exploit a vulnerability
• Discuss some defensive strategy
• See the consequences of an exploit in the real world

This talk will run approximately 60 minutes.

[elskwid]

@phlipper how would you like to do this in August (2015-08-24)?

[phlipper]

@elskwid August (2015-08-24) works for me, thanks.

[elskwid]

Confirmed. Will link to the meetup posting shortly.

[elskwid]

http://www.meetup.com/dev-reno/events/223313920/

[elskwid]

Thanks for the great talk!!