Secure Web Application Development 101

Presented at ProIT's "Web Security" Seminar, Bandung, Indonesia

Transcript

1. S E C U R E W E B A P P D E V E L O P M E N T 1 0 1 PA N G G I L I B E R S A J A S R I A K A D O L , S . K O M , C E H , P S M I
2. A B O U T • Software Engineer at Veritrans Indonesia was: • bistip.com • sukeru.com (bit.ly/SukeruDemo) • reline.io (bit.ly/RelineDemo) • NASA International Space Apps Challenge winner 2012-2013 • etc .. more at panggi.com
3. V T- W E B 2 . 0 O N E O F T H E P R O J E C T S A T V E R I T R A N S T H A T I I N V O LV E D I N
4. N O T A D E TA I L E D S E C U R I T Y G U I D E , J U S T 1 0 1 ; ) T O D A Y ’ S A G E N D A
5. – M I T M E D I A L A B M A N T R A “Demo or Die!”
6. N E V E R D I R E C T LY T R U S T U S E R I N P U T T I P # 1
7. U S E E N C RY P T I O N M O R E O F T E N T H A N Y O U T H I N K Y O U S H O U L D T I P # 2
8. A D D D E L AY S T O Y O U R C O D E T I P # 3
9. C O D E R E V I E W T I P # 4
10. A N A LY Z E T H E S O U R C E C O D E A N D W R I T E A U T O M AT E D T E S T T I P # 5
11. T U R N O F F I N - D E P T H E R R O R M E S S A G E S F O R E N D U S E R S T I P # 6
12. N E G O T I AT E R E Q U I R E M E N T S T I P # 7
13. P R O D U C T I O N I S N O T F O R T E S T I N G T I P # 8
14. B U I L D WA L L S T I P # 9
15. L I M I T P R I V I L E G E T I P # 1 0
16. D E P L O Y C O M P O N E N T S U S I N G D E F E N S E I N D E P T H T I P # 1 1
17. I N C L U D E A U D I T I N G , L O G G I N G , A N D R E P O R T I N G F E AT U R E S T I P # 1 2
18. P R O T E C T T H E A S S E T S T I P # 1 3
19. U S E I N T E R N A L A P I S T I P # 1 4
20. B R I N G I N O U T S I D E A U D I T O R S T O P E N T E S T Y O U R S Y S T E M T I P # 1 5
21. K E E P A P P R I S E D O F T H E L AT E S T T H R E AT S T I P # 1 6
22. T E S T E D F R E E O P E N S O U R C E S O F T WA R E ( F R A M E W O R K S , L I B R A R I E S ) - - U S E T H E M , D O N ’ T H AV E T O R E I N V E N T T H E W H E E L T I P # 1 7
23. H A R D E N I N G T I P # 1 8
24. E D U C AT E Y O U R S E L F T I P # 1 9
25. H AV E F U N ! ! T I P # 2 0