7 Application Security Design Patterns You Should Know
Many well-known security vulnerabilities in web and mobile applications could be easily avoided if they were already accounted for in the design phase. Often enough, changing the application on the architecture level late in the development phase is cumbersome and results in overly complicated and barely maintainable solutions.
In this Meetup, we’ll have a look at 7 application security design patterns that, if considered early, will make your life easier in terms of securing your application. Here are some of the goals that can be achieved with the discussed patterns:
– Easier centralized session and access management
– Mitigation of CSRF without the hassle of anti-CSRF tokens
– Making the integration of a Content Security Policy a breeze
– Effective defense in depth against missing object-level access control
– Mitigating arbitrary entity field overwrites by design
– Mitigating excessive data exposure by design
– Mitigating DoS through systematic user lock-out
– Device and session lists
– Notifications upon a login from a new device
– And more!
Agenda
*********
18:00: Gathering
18:15: Talk “7 Application Security Design Patterns You Should Know” by Thomas Konrad
19:00: Q&A
19:15: Drinks, snacks, discussions, socializing!
https://www.meetup.com/Security-Meetup-by-SBA-Research/events/262670983/?rv=ea1_v2&_xtd=gatlbWFpbF9jbGlja9oAJDcwZWI1OTY2LTQwMmQtNDZkZS05M2IwLTBmYmYxMTJmZmQwZg
hosted by IEEE Austria Section.
