Python Security Best Practices Against Vulnerabilities
summary
Covers concrete vulnerabilities (SQL injection, XSS, CSRF, command injection) with past breach counts like LinkedIn 6.5M and Dropbox 68M, demonstrates encryption and hashing using cryptography for symmetric encryption and shows working encrypt/decrypt code plus hashing with bcrypt and sha256. Recommends file upload validation, antivirus scanning, temp storage, MFA, rate limiting, secure session tokens, dependency management with Poetry, and tooling such as Bandit, pipdeptree, nmap, scapy and impacket for auditing.
AI-written summary · about
chapters (13)
- 0:00intro
- 0:20preamble
- 0:40peek into this talk
- 1:04section 1: introduction to python security
- 4:33section 2: common security threats in python
- 10:16section 3: secure coding practices in python
- 19:24section 3: authentication and authorization
- 24:38section 4: encryption and hashing in python - demo
- 38:58section 5: python security tools and libraries
- 42:34section 6: emerging threats and future considerations
- 50:52section 7: conclusion
- 51:23peek into this talk
- 53:39thanks!
related talks
59mPractical Security for Web Applications
26mTesting Python Security
45mPython common security mistakes in 2022
34mSecure Python Development: Tips, Tricks, and Tools
01h 04mWeb Security And You
25m"Security considerations in Python Packaging"
48mPractical Django Secuirty
52mPractical Security in Web Applications