Скачать или смотреть Arm yourself with Domain Driven Security. Speakers: Dan Bergh Johnsson and Daniel Deogun

We all know we have Anonymous, LulzSec, and NSA around. With this in mind, isn't it time to think about the security of our systems? Well, of course. In this talk, we'll show how Domain Driven Design is used to counteract security weaknesses without one thinking "security" all the time. So, if you're interested in learning how to design secure software, then this session is for you. Business and technical attacks are two kinds of attacks, where the latter is most famous, e g SQL Injection & XSS. But it doesn't mean business attacks are less harmful. On the contrary, they tend to be extremely sophisticated and powerful as they often leave infrastructure intact without firing alarms. Domain Driven Security is the field that counteracts both categories by using tools and mindsets from DDD. Keywords OWASP, security vulnerabilities, validation, injection flaw, cross-site scripting (XSS), Domain-Driven Design, context mapping, ubiquitous language, micro-service architecture.

jDays 2016