Out-of-the-Box security
summary
Covers common security problems in web and mobile applications and recommends specific libraries and tools that provide protection "out of the box" so developers who lack deep security expertise can avoid those risks. Names the approach of selecting appropriate frameworks, libraries and tooling to mitigate vulnerabilities by default rather than relying on developers to become security experts.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 3:33Security testing in practice
- 6:59Out-of-the-box security approach
- 8:02API key mistake example
- 13:17Password generation and randomness
- 13:37Security control automation
- 15:02SQL injection protection
- 19:57Cross-site scripting threats
- 24:53HTTPS certificates and trust
- 28:51Library and dependency updates
- 34:31Summary and recommendations
related talks
20mApplication Security Everywhere: Getting Over the Old and Making the New
45mState of (Absolute) AppSec
35mWeb Applications: Common Security Issues
46mPredictive Security Architecture
57mThe Developer's Field Guide to Software Security
33mInterview with
52mPractical Security in Web Applications
48mSecurity Basics for Developers (and Not Only Developers)