Building Layers of Defense with Spring Security
Explore layers of defense in application security using Spring Security in this GOTO Amsterdam 2017 conference talk. Dive into essential concepts like authentication, authorization, and web security. Learn how to implement crucial security measures including HTTP headers, CSRF protection, and CORS attack prevention. Discover techniques for securing method invocations, implementing multi-tenancy, and ownership-based access control. Gain insights on browser caching, content sniffing prevention, and protection against clickjacking and cross-site scripting attacks. Understand the importance of HTTPS, proper session management, and secure password handling. Apply these concepts to build robust, multi-layered security for modern web applications using the Spring Framework.