We're sorry but this page doesn't work properly without JavaScript enabled. Please enable it to continue.
Feedback

AppSec Village - Secure Your Code: Injections and Logging

3
 Cite
 Share
 Download
 Purchase
No logo availableDEF CON
 Krenn, Philipp

Formal Metadata

Title
AppSec Village - Secure Your Code: Injections and Logging
Title of Series
Number of Parts
374
Author
License
CC Attribution 3.0 Unported:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor.
Identifiers
Publisher
Release Date
Language

Content Metadata

Subject Area
Genre
Abstract
This talk combines two of the OWASP top ten security risks to highlight some widespread "this is fine" issues: * Injections (A1:2017): We are using a simple application exploitable by injection and will then secure it with the Web Application Firewall (WAF) ModSecurity. * Insufficient Logging & Monitoring (A10:2017): We are logging and monitoring both the secured and the unsecured application with the Elastic Stack.