International PHP Conference
The Conference for PHP and Web Development

Practical Security in Web Applications

Session
Until July 14:
✓ Workshop Day for free
✓ Arduino or Echo Dot fo free
✓ Save up to 690€
Register now
Bis 14. Juli:
✓ Workshop Tag gratis
✓ Arduino oder Echo Dot for free
✓ Bis zu 690 € sparen
Jetzt anmelden
Thank you for attending
✓ See you in 2023
Danke für Ihre Teilnahme
✓ Wir sehen uns in 2023
Infos
Tuesday, June 4 2019
10:30 - 11:15
Room:
Salon 2

Explore effective methods to identify & avoid the most common and devastating security pitfalls in Web Applications.

When it comes to an enterprise’s exposure to security vulnerabilities, one could easily argue that its web presence is by far its greatest threat. There are many ways to build vulnerable applications and a few effective ways to "build them right". We’ll instrument you to stay on right side of this equation.

Agenda:

Basic Resources and Tooling

  • We’ll look at the OWASP Top 10
  • Open-Source Code Analysis for your CI/CD
  • Open-Source Security Scanning

Low-level Threat Avoidance

  • Avoiding SQL Injections — Dangers of not properly-using an ORM
  • Avoiding CSRF
  • Avoiding XSS
    • Data Scrubbing
    • Data Rendering

Application Threat Avoidance

  • User Authentication / Password Hashing
  • OAuth Security
  • Resource Access
    • Multi Tenancy: Users & Companies

Architectural Considerations

  • Systems Architecture
  • Credentials Handling

This Session originates from the archive of Diese Session stammt aus dem Archiv von BerlinBerlin . Take me to the program of . Hier geht es zum aktuellen Programm von Munich München .

This Session originates from the archive of Diese Session stammt aus dem Archiv von BerlinBerlin . Take me to the program of . Hier geht es zum aktuellen Programm von Berlin Berlin .

This Session Diese Session originates from the archive of stammt aus dem Archiv von BerlinBerlin . Take me to the current program of . Hier geht es zum aktuellen Programm von Munich München or oder Berlin Berlin .

Stay tuned!

Register for our newsletter

Behind the Tracks of IPC

PHP Core
Best practices & applications

Web Development
Broader web development topics

Quality & Security
More about software quality &
security

Agile & People
Getting agile right is so important

Software Architecture
All about PHP frameworks, concepts &
environments

DevOps & Deployment
Learn about DevOps and transform your development pipeline

Content Management Systems
Sessions on content management systems

#slideless (pure coding)
See how technology really works

Web Security
All about
web security