Secure web app basics: validation, auth, secrets, OWASP risks, and systems that protect data and fail safely
Software's more useful when we can trust it. Whether it's your WhatsApp chats, your bank statements, or your medical records, the last thing you want is to find out that your personal information has been exposed in a security breach - and when you're the developer, finding out that it's your app that got breached is even worse.
Building secure applications is much easier if you're building on secure foundations. In this session, Dylan Beattie will talk you through the fundamentals of building and supporting secure web applications: input validation, authentication and authorisation, secrets management and supply chain security. We'll look at the OWASP Top 10 - not as a box-ticking exercise, but as a field guide to the vulnerabilities that have burned real teams on real applications. We'll talk about how to handle your users' data, how to design systems that fail safely when things go wrong, and how to make security a natural part of your development workflow rather than a panicked WhatsApp message at 2am on a Sunday.
About Dylan
Dylan Beattie's been giving technology presentations since 2008; he's spoken at hundreds of conferences and meetups all over the world, and videos of his presentations have racked up millions of views online. In this session, Dylan will share tips, tricks and techniques for anybody who wants to give engaging, entertaining presentations without skipping over the gritty technical details.
