Главная
Study mode:
on
1
Introduction
2
Who am I
3
What is security
4
Application level security
5
Layers of defense
6
Redundancy
7
Spring Security
8
Application Security
9
Getting Started
10
Authentication Manager
11
Web Security
12
Authorization
13
Default Setup
14
Default Login Page
15
Browser Caching
16
Browser Headers
17
Content Sniffing
18
HTTP Strict Transport Security
19
Clickjacking Attacks
20
XFrame Options
21
Reflected CrossSite Scripting
22
Public Key Pinning
23
Headers
24
CSRef Protection
25
Custom Tokens
26
State Changing Operations
27
Session Scope Token
28
Single Page Applications
29
CSRF Security
30
Authorization Requests
31
Limitations
32
Ordering Rules
33
Denial of Access
34
Gutshots
35
NetEnabled
36
Method Security Annotation
37
PostAuthorize
38
Custom Functions
39
Method Level Security
40
Net Roles Allowed
41
Accessing Current Users
42
Custom Authorization
43
Access Control List
44
HTTPS Everywhere
45
Coverage Sessions
46
Passwords
47
Conclusion
48
Defaults
Description:
Explore layers of defense in application security using Spring Security in this GOTO Amsterdam 2017 conference talk. Dive into essential concepts like authentication, authorization, and web security. Learn how to implement crucial security measures including HTTP headers, CSRF protection, and CORS attack prevention. Discover techniques for securing method invocations, implementing multi-tenancy, and ownership-based access control. Gain insights on browser caching, content sniffing prevention, and protection against clickjacking and cross-site scripting attacks. Understand the importance of HTTPS, proper session management, and secure password handling. Apply these concepts to build robust, multi-layered security for modern web applications using the Spring Framework.

Building Layers of Defense with Spring Security

GOTO Conferences
Add to list
#Conference Talks #GOTO Conferences #Information Security (InfoSec) #Cybersecurity #Web Security #Application Security #Computer Science #Authorization #Network Security #Access Control Lists #Browser Security #Programming #Programming Languages #Java #Spring Framework #Spring Security
1 of 48

Introduction