Mitigating at Design Time
February 27 @ 6:30 pm - 8:30 pm
Abstract: A secure application architecture not only prevents vulnerabilities in the initial release but also reduces the frequency of security issues being introduced into subsequent release candidates. Early OWASP Top 10 lists included buffer overflows as one of the most common vulnerabilities, but with the rise of type-safe languages those vulnerabilities became less common. Other security issues like Cross-Site Request Forgery are less common in microservice architectures and have fallen off the top 10 list as well which raises the question: By choosing certain languages, frameworks, and application runtimes can an app be designed from the beginning to have fewer recurring vulnerabilities? This presentation explores a secure application design to reduce common vulnerabilities in the context of a Docker/Kubernetes based application.
Shaun Lamb works as a Principle Application Security Architect at SAS Institute where he focuses on application, API, and container security. With a background in web application development, he aspires to design solutions that are easy for developers and administrators to apply security controls. Shaun holds a CSSLP and has presented at local conferences such as Triangle InfoSeCon (https://www.triangleinfosecon.com/) All Things Open (https://allthingsopen.org/) and will be presenting at InfoSec World (https://www.infosecworldusa.com/2020/conference-program) in Orlando in March.