From the crypt to the code Web Security Explored Through Horror Movies
summary
Maps OWASP Top 10 (2021) items to horror-film metaphors and then gives concrete takeaways: broken access control framed as invisibility with fixes like deny by default, rate limiting, short‑lived tokens and an OpenFGA example; injection shown as Alien face‑hugger with input sanitization, server‑side validation, ORMs and DOMPurify; cryptographic failures pushed to encrypt‑at‑rest and TLS; dependency Dependabot updates and inventory to stop the growing blob; includes a small quarantine‑scanner code snippet and names specific tools and defenses to apply.
AI-written summary · about
chapters (8)
- 0:00Welcome to horror security
- 2:10Horror movies teach web security
- 6:50OWASP and top risks
- 9:20Broken access control
- 15:38Cryptographic failures
- 19:17Injection threats
- 26:41Vulnerable dependencies
- 30:17Horror survival tips
related talks
24mFrom the crypt to the code: Web security explored through horror movies
34mWeb security explored through horror movies
01h 02mUnderstanding the OWASP Top 10
53mOWASP Top 10: What are them and how to prevent them
35mInside a hacker’s mind
59mSecuring the Digital Landscape: A Deep Dive into OWASP Top 10 for Applications, APIs, and LLMs
01h 30mCommon Webapp Vulnerabilities and What to Do About Them
01h 00mWeb Application Security Risks: A Look at OWASP Top Ten 2017