SCS3: Jörg Ewald - Application Security as a Team Effort
Swiss Cyber Storm 3 - May 2011
"Up until now, Web application security is usually achieved by loosely combining individual solutions: Applications are implemented and tested according to known safety standards; Web Application Firewalls filter out potentially malicious requests and prevent applications from spilling sensitive data to end users; virus scanners ensure that binary content is malware-free. But there is very little, if any, interaction between those individual solutions. In this talk, we will investigate a more holistic approach, where applications, Web Application Firewalls and other components form a tightly coupled system, to markedly increase the overall security level."
Slides: http://media.hacking-lab.com/scs3/scs...
Event: https://www.swisscyberstorm.com/