We're sorry but this page doesn't work properly without JavaScript enabled. Please enable it to continue.
Feedback

Python security best practices

Formale Metadaten

Titel
Python security best practices
Serientitel
Anzahl der Teile
115
Autor
Mitwirkende
Lizenz
CC-Namensnennung - keine kommerzielle Nutzung - Weitergabe unter gleichen Bedingungen 4.0 International:
Sie dürfen das Werk bzw. den Inhalt zu jedem legalen und nicht-kommerziellen Zweck nutzen, verändern und in unveränderter oder veränderter Form vervielfältigen, verbreiten und öffentlich zugänglich machen, sofern Sie den Namen des Autors/Rechteinhabers in der von ihm festgelegten Weise nennen und das Werk bzw. diesen Inhalt auch in veränderter Form nur unter den Bedingungen dieser Lizenz weitergeben.
Identifikatoren
Herausgeber
Erscheinungsjahr
Sprache

Inhaltliche Metadaten

Fachgebiet
Genre
Abstract
Have you ever have a feeling that you are able to write code that solves problem but your not sure whether is safe? How much of your time you spend on investigating whether your code is not vulnerable ? Do you know what kind of risks you can face during parsing XML files? If those questions appeared into your mind this presentation will clarify your doubts and bring your skills closer to writing more safe code. There are many repeatable routines during developing code like: saving user data, reading files or pickles. Those routines can lead to a drop in vigilance which may lead to very terrible consequences for our application or data. During presentation I will explain what are aims of the attackers and go through security issues that can appear in: • not verified user input, • parsing XML, • assert statements, • using temporary files, • reading yaml and pickles and I will compare it OWASP TOP 10. In each of this topics I will: • show examples of codes that can break your application, • describe what are the risks and how to solve it, • talk about tools that help detect issues in your code, • present XML libraries overview which shows what specific library is vulnerable for. Major of presentation will be focused on XML issues as it is wide problem not only in Python language. If you want to increase your programming security skills, see how certain attacks can be performed and how to defend against them this presentation is for you.