Preventing SQL Injection in Python
SANS Cloud Security focuses the deep resources of SANS on the growing threats to The Cloud by providing training, GIAC certification, research, and community initiatives to help security professionals build, deploy and manage secure cloud infrastructure, platforms, and applications.
SQL Injection, while I often consider it the "least necessary"
vulnerability, just doesn't appear to go away. CISA just published an
advisory noting how SQL injection is still very much an issue. Just last
week, we had SQL injection vulnerabilities in Ivanti's Endpoint Manager
as well as Cisco's Firepower console.
This brief video focuses on Python, and highlights some of the unique challenges to prevent SQL injection in Python.
About the Speaker
Dr. Johannes Ullrich is the Dean of Research for SANS Technology Institute, a SANS Faculty Fellow, and founder of the Internet Storm Center (DShield.org) which provides a free analysis and warning service to thousands of Internet users and organizations. He is the host of the SANS Internet Storm Center Daily Stormcast, a daily podcast that provides a brief 5-minute summary of current network security related events, and the co-author of SANS SEC522: Application Security: Securing Web Apps, APIs, and Microservices, https://www.sans.org/cyber-security-c...
SANS Cloud Security Curriculum: www.sans.org/cloud-security
GIAC Cloud Security Certifications: https://www.giac.org/focus-areas/clou...
LinkedIn: / sanscloudsec
Discord: www.sansurl.com/cloud-discord
Twitter: @SANSCloudSec