We're sorry but this page doesn't work properly without JavaScript enabled. Please enable it to continue.
Feedback

Python security best practices

Formal Metadata

Title
Python security best practices
Title of Series
Number of Parts
115
Author
Contributors
License
CC Attribution - NonCommercial - ShareAlike 4.0 International:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal and non-commercial purpose as long as the work is attributed to the author in the manner specified by the author or licensor and the work or content is shared also in adapted form only under the conditions of this
Identifiers
Publisher
Release Date
Language

Content Metadata

Subject Area
Genre
Abstract
Have you ever have a feeling that you are able to write code that solves problem but your not sure whether is safe? How much of your time you spend on investigating whether your code is not vulnerable ? Do you know what kind of risks you can face during parsing XML files? If those questions appeared into your mind this presentation will clarify your doubts and bring your skills closer to writing more safe code. There are many repeatable routines during developing code like: saving user data, reading files or pickles. Those routines can lead to a drop in vigilance which may lead to very terrible consequences for our application or data. During presentation I will explain what are aims of the attackers and go through security issues that can appear in: • not verified user input, • parsing XML, • assert statements, • using temporary files, • reading yaml and pickles and I will compare it OWASP TOP 10. In each of this topics I will: • show examples of codes that can break your application, • describe what are the risks and how to solve it, • talk about tools that help detect issues in your code, • present XML libraries overview which shows what specific library is vulnerable for. Major of presentation will be focused on XML issues as it is wide problem not only in Python language. If you want to increase your programming security skills, see how certain attacks can be performed and how to defend against them this presentation is for you.