Velocity Conference: Build Resilient Distributed Systems
summary
Claims that cross-site scripting, SQL injection, XML injection, and buffer overflows can be addressed with framework-level fixes and not just ad hoc patches. Evidence comes from conversations with thousands of ops and dev teams and deployments of framework mitigations in multiple stacks. The concrete build is framework hooks and validators, measured to reduce exploitable incidents and simplify performance tuning, though a noticeable handful of teams still struggle to adopt the changes.
AI-written summary · about
related talks
34mBeating the pentester
28mLearning from High Profile Failures
23mSecure Code, Safe Future: Mastering Security in Critical Software Development
59mTeam of 30 million: Reducing Software Vulnerability at a Global Scale
52mApplication Security at DevOps Speed and portfolio scale
30mAppSec in a DevOps World
53mPractical tips for web application security in the age of agile and DevOps
08mShift up: Continous Security and feedback loop