200K+ reasons security is a must
•
7 likes•1,818 views
We all have focussed on best practices and code quality over the past years, but we seemed to forgot the most important aspect of the web: security. This talk gives a good overview on your first-line of defence in your code, how to ensure that new exploits and hacking techniques are covered with tests and how you build solid web applications that secured enough to keep script kiddies and wanna-be hackers away. I will also give some tips what to do when you're company becomes victim of cyber crime.
Recommended
More Related Content
Viewers also liked
Viewers also liked (20)
Similar to 200K+ reasons security is a must
Similar to 200K+ reasons security is a must (20)
More from Michelangelo van Dam
More from Michelangelo van Dam (20)
Recently uploaded
Recently uploaded (20)
200K+ reasons security is a must
- 1. 200K+ reasons Why security is a must in it2PROFESSIONAL PHP SERVICES
- 2. About 2 years ago
- 3. 99K problems
- 4. A year later
- 5. Today!
- 6. Today!
- 12. Yes, you’re a target! https://www.flickr.com/photos/jeepersmedia/14546059371
- 14. One password, many sites!
- 15. One password, many sites!
- 16. One password, many sites!
- 17. One password, many sites!
- 18. One password, many sites!
- 19. One password, many sites! abc123
- 20. Advice on tools!!! Password managers!
- 21. Advice on tools!!! Password managers!
- 22. Advice on tools!!! Password managers!
- 23. Advice on tools!!! Password managers!
- 25. Or just use SMS http://twillio.com
- 26. Who’s after my data? https://www.flickr.com/photos/teegardin/6093810333
- 27. Script kiddies
- 32. What to do against it? https://www.flickr.com/photos/drachmann/327122302
- 38. Extra care for privacy data https://www.flickr.com/photos/hyku/368912557
- 44. Security is not an afterthought! https://www.flickr.com/photos/webb-zahn/10971215425
- 46. Sanitise data! Always!!! <?php $id = $_GET['id']; // sanitise tainted data $clean_id = filter_var($id, FILTER_SANITIZE_NUMBER_INT); $clean_id = filter_var($clean_id, FILTER_VALIDATE_INT); if (0 < $clean_id) { $stmt = $pdo->prepare( 'SELECT * FROM TABLE WHERE `id` = ?' ); $stmt->bindParam(1, $clean_id, PDO::PARAM_INT); $stmt->execute(); }
- 49. Use the right tool for the job https://www.flickr.com/photos/florianric/7263382550
- 54. You know all this, right! https://www.flickr.com/photos/sarahreido/3120877348
- 55. Victim of an attack? https://www.flickr.com/photos/marittoledo/8512244945
- 56. Know you’ve been hacked!
- 59. Inform the world
- 63. Learn about the risks
- 64. Learn the basics of hackinghack.me
- 65. Use hack cheat sheets ha.ckers.org
- 67. Other resources…
- 72. May the force be with you
- 73. Contact us in it2PROFESSIONAL PHP SERVICES Michelangelo van Dam michelangelo@in2it.be www.in2it.be PHP Consulting - Training - QA
- 74. phpcon.eu Ticket sales start soon!
- 75. Thank you Have a great conference http://www.flickr.com/photos/drewm/3191872515