AOEconf2017: Application security – How security issues develop, how they are found and how they can be mitigated

How can I make my applications secure? How can I find, exploit and mitigate security-relevant bugs? And how can I make my code more stable? AOE developer Bastian Ike provides a definition of application security for the participants of AOEconf2017, focusing on software security. He then describes common attack vectors / common classes of bugs – especially with regard to web applications.

Our security expert picked out three of the attack vectors, which he describes in more detail:

• Code execution,
• encryption and
• issues in business logic.

Bastian explains why these attack vectors often occur together and therefore describes them from a high-level perspective. He concludes his talk by describing how to prevent these issues – and how to find them in the first place.