Upload File

secure software development - crysys · 2018-09-05 · diploma project it securitybootcamp c ......

  • Home
  • Documents
  • Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,
16
© 2018 BME HIT and AUT Secure Software Development the course itself Levente Buttyán CrySyS Lab www.crysys.hu

Upload: others

Post on 30-May-2020

4 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,

©2018BMEHITandAUT

SecureSoftwareDevelopmentthecourseitself

LeventeButtyánCrySySLab

www.crysys.hu

Page 2: Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,

|

ITSecuritystudyprogram@BME

SecureSoftwareDevelopment- thecourse 2

moreinfo:http://www.crysys.hu/education/

IT S

ecu

rity

M

Sc i

nfo

min

or

Computer Security (2/1/0)

Network Security (2/1/0)

Crypto Protocols (2/1/0)

IT Sec Lab

Semesterprojects

Diploma project

Secu

re O

pera

tio

n o

f N

etw

ork

s (0

/0/4

)

Secu

re S

oft

ware

Deve

lop

men

t (2

/0/2

)

Pri

vacy

-Pre

serv

ing

Tech

no

log

ies

(2/0

/0)

Reve

rse E

ng

ineeri

ng

of Pro

gra

ms

(2/0

/0)

Electiv

ecourses

Secu

rity

an

d P

riva

cy E

con

om

ics

(2/0

/0)

IT Security (3/0/0)BSc info base course

Semesterproject

Diploma project

IT Security Bootcamp

MSc

BSc

Page 3: Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,

|

Basicinfoandcoursecontent

SecureSoftwareDevelopment- thecourse 3

https://www.crysys.hu/education/VIHIAV33

Page 4: Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,

|

Overviewofcontent

§ Usingcryptographicprimitivesinsoftware§ Codesigning§ Authenticationandauthorization§ Securityinwebbasedapplications(serverside,clientside,APIs)§ Securityinmobileapplications(Android)§ Securityissuesinmanagedlanguages§ Securityissuesinlowlevellanguages§ Modernprogramminglanguages

SecureSoftwareDevelopment- thecourse 4

Page 5: Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,

|

Properuseofcryptography

SecureSoftwareDevelopment- thecourse 5

Page 6: Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,

|

Codesigning

SecureSoftwareDevelopment- thecourse 6

Page 7: Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,

|

Websecurityissues

SecureSoftwareDevelopment- thecourse 7

Page 8: Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,

|

Authenticationandauthorization

SecureSoftwareDevelopment- thecourse 8

Page 9: Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,

|

APIsecurity,securityAPIs

SecureSoftwareDevelopment- thecourse 9

Page 10: Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,

|

Mobilesecurity

SecureSoftwareDevelopment- thecourse 10

Page 11: Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,

|

Securityissuesinmanagedlanguages

SecureSoftwareDevelopment- thecourse 11

Page 12: Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,

|

Securityissuesinlow-levellanguages

SecureSoftwareDevelopment- thecourse 12

Page 13: Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,

|

Labexercises

SecureSoftwareDevelopment- thecourse 13

https://avatao.com/

Page 14: Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,

|

Jointhecommunity

SecureSoftwareDevelopment- thecourse 14

Page 15: Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,

|

Andtakepaths

SecureSoftwareDevelopment- thecourse 15

Page 16: Secure Software Development - CrySyS · 2018-09-05 · Diploma project IT SecurityBootcamp c ... and authorization § Security in web based applications (server side, client side,

|SecureSoftwareDevelopment- thecourse 16

Questions?


Implementing Server-Side Authorization - Drive REST API — Google Developers

Sample Authorization

Authorization Module

Online Multimedia Authorization Protocol · Online Multimedia Authorization Protocol 2-Apr-2012/1.0 draft P-11 Open Authentication Technical Committee 4 Authorization Code An Authorization

Crysys - Skywiper (Flame)

Understanding Security APIs - CrySyS

WCRP Climate and Cryosphere (CliC) Project CRYSYS – Cryosphere System in Canada Dr. Barry Goodison

Online Multimedia Authorization ProtocolOnline Multimedia Authorization Protocol 22-Aug-12/1.0 Open Authentication Technical Committee 4 Authorization Code An Authorization Code is

Authorization Commands

SCRIPT Electronic Prior Authorization Transactions … · SCRIPT Electronic Prior Authorization Transactions Overview ... Electronic Prior Authorization Transactions ... LOINC, SNOMED,

Package ‘pinnacle.API’ - R · Examples AcceptTermsAndConditions(accepted=TRUE) authorization 3 authorization Authorization for the Pinnacle API Description Authorization for the

Tamper resistant devices Levente Buttyán Laboratory of Cryptography and System Security (CrySyS) Budapest University of Technology and Economics [email protected]

Prior Authorization - uhc€¦ · How do I know if my medication requires prior authorization? Prior Authorization What is a prior authorization? Prior authorization requires your

CONSOLIDATED MEMORANDUM OF UNDERSTANDING 2014 · PDF fileCONSOLIDATED MEMORANDUM OF UNDERSTANDING 2014 ... SIDE LETTER AGREEMENT ... granted access upon obtaining authorization from

CDA AUTHORIZATION FORM BW SVS/Ccntrc Code AUTHORIZATION ...streaming.ednoland.com/media/SG010150_publication... · CDA AUTHORIZATION FORM BW SVS/Ccntrc Code AUTHORIZATION FOR USING

Warm Automatic C-OFF Authorization Option • 99 C-OFF Policies Overtime/C-OFF Entry Absentee Policy •Absentee Policy for Clubbing the Leaves •Option for Single Side or Both Side

INFOCOMMUNICATIONS JOURNAL, VOL.?, NO ... - CrySyS Lab

Basic Security Concepts - CrySyS

Employment Authorization

CrySys guest-lecture: Virtual machine introspection on modern hardware

PLEASE APPROVE MEDICAL INFORMATION AUTHORIZATION …€¦ · PLEASE APPROVE MEDICAL INFORMATION AUTHORIZATION ON REVERSE SIDE ATTENDING PHYSICIAN’S STATEMENT ACCIDENT AND SICKNESS

USER Authorization

Users & Authorization

UnitedHealthcare Notification/Prior Authorization ... UHC...UnitedHealthcare Notification/Prior Authorization Requirements ... Notification/Prior Authorization Requirements Effective

Authentication in the Cloud€¦ · OAuth 2.0 Obtaining authorization (access/refresh token) Authorization code – Server-side webapp Implicit grant – JavaScript app – Access

Authorization 001

Prior authorization handbook Authorization Handbook.pdfPrior Authorization Handbook March 2018 1 . Introduction The Prior Authorization Handbook is designed to help those who bill

Authorization. What is authorization? Authentication---who are you? Authorization---what is a user authroized to access? Role-based authorization Policy-based

Laboratory of Cryptography and Systems Security (CrySyS)

Authorization Manual 2016 - ehs.ncpublichealth.comehs.ncpublichealth.com/oet/docs/auth/AuthorizationManual-2016.pdf · Authorization Procedure 3 Comprehensive ... type of authorization

Software & Cloud Architect| Microsoft MVP: Development | … · 2019-06-19 · BlazorPlans Authentication, Authorization Live reloading in the browser during development Server-side

Part-Time Authorization Workflow Processing Authorization rev. 07/2017 1 Part-Time Authorization Workflow Processing

Payroll Authorization Form - Payroll/Personnel Authorization

SQL Authorization

Version Number Authentication and Local Key Agreement Levente Buttyán Laboratory of Cryptography and System Security (CrySyS) Budapest University of Technology