[hungary] survival is not mandatory. the air force one has departured are you on board?
TRANSCRIPT
![Page 1: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/1.jpg)
HACTIVITY CONFERENCE 2015
The air force one has departured are you on board? SURVIVAL IS NOT MANDATORY
![Page 2: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/2.jpg)
Glenn ten Cate
Security dude @ Schuberg Philis
Author of OWASP-SKF
Coordinates
Twitter: @FooBar_testing_
E-mail: [email protected]
Website: secureby.design
WHO AM I?
![Page 3: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/3.jpg)
Fast mean of traveling
Safest transportation method
Autopilots
Monitoring and communication
Airplanes are very reliable
AIRPLANES
![Page 4: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/4.jpg)
HACTIVITY CONFERENCE 2015
TRAINING
![Page 5: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/5.jpg)
HACTIVITY CONFERENCE 2015
CHECKLISTS
![Page 6: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/6.jpg)
HACTIVITY CONFERENCE 2015
MANUALS
![Page 7: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/7.jpg)
All the parts of the airplane are tested
Critical individual components
Simulate certain conditions
Manual testing
Automatic testing
TESTING
![Page 8: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/8.jpg)
HACTIVITY CONFERENCE 2015
The airliner companies share information
This information is key to prevent x
Learn from mistakes…
All for the good of protecting
SHARING INFORMATION
![Page 9: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/9.jpg)
Last year around 45 Million web-applications got hacked
Sensitive information is leaked
Lives of people are at risk
Criminals get better IT is not…
THOSE WHO FAIL TO LEARN FROM HISTORY…
![Page 10: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/10.jpg)
ARE FORCED TO REPEAT THE PAST
THOSE WHO FAIL TO LEARN FROM HISTORY…
![Page 11: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/11.jpg)
HACTIVITY CONFERENCE 2015
The Open Web Application Security Project
Worldwide not-for-profit charitable organization focused on improving the security of software.
Knowledge sharing platform / network
Visit www.owasp.org for more information
OWASP
![Page 12: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/12.jpg)
HACTIVITY CONFERENCE 2015
OWASP Application Security Verification Standard
Worldwide used checklist
Securing web-applications in depth
Visit www.owasp.org for more information
OWASP CHECKLISTS
![Page 13: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/13.jpg)
HACTIVITY CONFERENCE 2015
OWASP Application Security Verification Standard
Use level 1 – 3 depending on the type of application and data it holds.
Use it as a security requirement
OWASP ASVS
![Page 14: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/14.jpg)
Can only lead to one thing
Only question is when?
NO SECURITY REQUIREMENTS
![Page 15: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/15.jpg)
HACTIVITY CONFERENCE 2015
OWASP Security Knowledge Framework
Tool for training developers
Creating secure web-applications by design
Implementation of OWASP ASVS
Visit www.secureby.design for more information
OWASP TRAINING
![Page 16: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/16.jpg)
HACTIVITY CONFERENCE 2015
OWASP Security Knowledge Framework
Pre-development phase
Post-development phase
Security Knowledge reference place
Security code examples
OWASP SKF
![Page 17: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/17.jpg)
HACTIVITY CONFERENCE 2015
OWASP Security Knowledge Framework
Demo
https://securityknowledgeframework.org/demo.php
OWASP SKF
![Page 18: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/18.jpg)
HACTIVITY CONFERENCE 2015
OWASP-SKF
Code review
SAST
DAST
Manual pentest by expert
SDLC MANUAL
![Page 19: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/19.jpg)
HACTIVITY CONFERENCE 2015
Software Development Life Cycle
Travis CI
Coveralls CI
Scrutinizer CI
SDLC CI
![Page 20: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/20.jpg)
HACTIVITY CONFERENCE 2015
Travis CI SDLC CI
![Page 21: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/21.jpg)
HACTIVITY CONFERENCE 2015
Coveralls CI SDLC CI
![Page 22: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/22.jpg)
HACTIVITY CONFERENCE 2015
Scrutinizer CI SDLC CI
![Page 23: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/23.jpg)
HACTIVITY CONFERENCE 2015
DEMO SDLC OWASP-SKF
![Page 24: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/24.jpg)
HACTIVITY CONFERENCE 2015
CONCLUSION SO FAR…
![Page 25: [Hungary] Survival is not mandatory. The air force one has departured are you on board?](https://reader031.vdocuments.us/reader031/viewer/2022030205/58aa27cd1a28abff6b8b6d8b/html5/thumbnails/25.jpg)
HACTIVITY CONFERENCE 2015
QUESTIONS Questions?