WebDan 2015

Transcript

1. Web Security 101
2. [root@localhost ~] whoami Predrag Cujanović Security Engineer @ Humanity Inc. predrag@cujanovic.com fb.com/cujanovic twitter.com/cujanovic
3. [root@localhost ~] ls -lah tl;dr 2007. 2011. 2012. Security Engineer (internet) (elfak)
4. [root@localhost ~] ls -lah Regular web users Advanced web users (developers, sysadmins)
5. [root@localhost ~] ls -lah Why is Web Security important?
6. [root@localhost ~] uname -a Regular users: OS Security Malware Updates Firewall
9. [root@localhost ~] uname -a Regular users: Network Security SSL Open WiFi networks
15. [root@localhost ~] uname -a Regular users: Social engineering Phishing
18. [root@localhost ~] uname -a Advanced web users(developers): Secure Apps: OWASP Top 10 2013 Project (Injection, XSS, IDOR, CSRF) Penetration Testing
20. [root@localhost ~] uname -a Using FB for HTTP DdoS: https://www.youtube.com/watch?v=g2gAFHs_3dY Pingdom DOM XSS: https://www.youtube.com/watch?v=H0qv5o0bbLM 8tracks stored XSS: https://www.youtube.com/watch?v=rkbGvf3abws
21. [root@localhost ~] uname -a
22. [root@localhost ~] uname -a
23. [root@localhost ~] uname -a Advanced web users(sysadmins): OS Updates Services update SSL Server side WAF Firewall Backups Permissions Default passwords
24. [root@localhost ~] uname -a Questions? Thanks :) predrag@cujanovic.com fb.com/cujanovic twitter.com/cujanovic