cso-in-residence, echelon one,...
TRANSCRIPT
![Page 1: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/1.jpg)
David MortmanCSO-in-Residence, Echelon One, LLC
A Tale of 2.0 Webs
![Page 2: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/2.jpg)
It Was The Best of Times
![Page 3: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/3.jpg)
It Was The Worst of Times
![Page 4: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/4.jpg)
With Apologies to Dickens
![Page 5: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/5.jpg)
It Was The Best of Times
![Page 6: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/6.jpg)
![Page 7: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/7.jpg)
![Page 8: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/8.jpg)
It Was The “Worst” of Times
![Page 9: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/9.jpg)
Technical Issues
Cross Site ScriptingCross Site Request Forgery
SQL InjectionClickjacking
iFrame InjectionGIFARS
![Page 10: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/10.jpg)
Related Technical Issues
DNS Cache PoisoningBGP Hijacking
![Page 11: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/11.jpg)
Architecture and Other Issues
Business Logic FlawsDeep Linking
![Page 12: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/12.jpg)
Data LeakagePrivacy IssuesIdentity Theft
![Page 13: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/13.jpg)
http://1raindrop.typepad.com/
![Page 14: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/14.jpg)
Innovation?What Innovation?
![Page 15: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/15.jpg)
![Page 16: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/16.jpg)
![Page 17: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/17.jpg)
![Page 18: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/18.jpg)
But….
![Page 19: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/19.jpg)
It Could Be A Lot Worse
![Page 20: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/20.jpg)
Fortunately…
![Page 21: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/21.jpg)
There Are Options
![Page 22: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/22.jpg)
Push Vendors
![Page 23: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/23.jpg)
When will you stop making such crappy software?
![Page 24: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/24.jpg)
When you stop buying it.
![Page 25: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/25.jpg)
Security In The SDLC
![Page 26: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/26.jpg)
SDLC In 8 Slides
![Page 27: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/27.jpg)
Educate
![Page 28: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/28.jpg)
Design
![Page 29: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/29.jpg)
Code
![Page 30: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/30.jpg)
Test
![Page 31: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/31.jpg)
Ship
![Page 32: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/32.jpg)
Update
![Page 33: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/33.jpg)
Books
Threat ModelingWriting Secure Code
Software Security: Building Security In
![Page 34: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/34.jpg)
Resources
OWASPNoScript
BugMeNotAdBlock
![Page 35: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/35.jpg)
http://jeremiahgrossman.blogspot.com
![Page 36: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/36.jpg)
http://ha.ckers.org/blog
![Page 37: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/37.jpg)
http://1raindrop.typepad.com/
![Page 38: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/38.jpg)
![Page 39: CSO-in-Residence, Echelon One, LLCcdn.ttgtmedia.com/searchSecurity/downloads/ATaleOf2.0Webs_Best… · E New England Ave Shad st E south st R veriea E Ave Mccoy an Ave N Map a Park](https://reader033.vdocuments.us/reader033/viewer/2022042807/5f7be1067aff1932217d5914/html5/thumbnails/39.jpg)
David MortmanCSO-in-Residence, Echelon One, LLC
A Tale of 2.0 Webs