Application Security — Answers to Everyday Questions
summary
The talk covers practical application security (AppSec) topics for development teams: generating anti‑CSRF tokens, secure storage of secret keys, and how to perform security testing under tight time constraints. It addresses many everyday AppSec questions and offers concrete approaches for handling these issues.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:42Security autotests
- 6:16XSS attack defense
- 11:15Form action signatures
- 15:54Storing secret keys
- 19:32Secure project hosting
- 25:54Push vs SMS notifications
- 27:46Imagemagick vulnerabilities
- 31:43Rate limits and monitoring
- 36:37Q&A
related talks
55mCan AppSec Be Fixed?
15mInterview with
48mSecurity Basics for Developers (and Not Only Developers)
57mKeynote: Maturing Your Application Security Program
50mAttack Your Apps Before the Bad Guys Do
33mJumpstarting Your Appsec Program
29mAppSec on a budget
51m10 things developers need to know about web application security