Скачать или смотреть Principles and Practices to Write Secure code

Abstract:
Java platform provides various features to conveniently enable application-level security. For example, Java Cryptographic Architecture (JCA) offers functionalities for hashes, key generations, certificates, digital signatures, and encryption. Java Secure Socket Extension (JSSE) includes APIs for standard secure communication protocols like SSL/TLS. Spring security offers ready-to-use authentication and authorization modules. However, misusing these libraries and frameworks seriously undermines application security.
In this talk, I will discuss common security API misuses and framework misconfigurations that I observed during my research in software security. I will also talk about some possible reasons behind these issues and how to avoid them.
Track: Security; Secure coding;
Experience Level for the Target Audience: Beginners
Speaker Bio:
Sazzadur Rahaman is a Ph.D. candidate from the department of computer science at Virginia Tech. In August 2020, he will join as a tenure-track assistant professor in the Department of Computer Science at the University of Arizona. He works towards making security research more democratized and affordable. Sazzadur's works have been published in top-tier security conferences and Journals. As the recognition of his work, he received several fellowships (Bitshare fellowship and Pratt fellowship) at Virginia Tech.
Prior to joining Virginia Tech, he worked as a software engineer. He has 3.5+ years of industry experience in building health care, payment, and financial technology solutions. He received his B.Sc. in computer science at Bangladesh University of Engineering and Technology (BUET).