We all invest a lot of effort in the quality of our web development and (hopefully) security is one of those practices we bake in from the ground up. Thing is though, like most things in software development, times change and many of the practices we considered secure yesterday aren’t necessarily so today. Hardware gets faster, automation becomes more prevalent and the bad guys simply find new ways to break our good work.
This session looks at a collection of lesser-known practices which are being employed to break through website security, often circumventing what we’ve traditionally held to be “secure” practices. We’ll take a look at what these practices were designed to protect, how they’re being broken and what we need to do differently to protect against them.
About the speakers
Mr Security
Troy is a software architect and Microsoft Most Valued Professional (MVP) focusing on security concepts and process improvement in software delivery within a large enterprise environment. His specialties include C# ASP.Net, SQL Server, SOA, SharePoint, Security and Continuous Integration