Security
Details
In April we're hosting a night of talks focussed around security.
Thanks to BaseKit for kindly hosting us this month.
Our talks this month:
- OWASP Top 10 Proactive Controls
Katy Anton (https://twitter.com/katyanton), Application Security Consultant at Veracode (http://www.veracode.com/) and OWASP Bristol (https://www.owasp.org/index.php/Bristol) Chapter Leader
Cyber attacks are a real and growing threat to businesses and an increasing number of attacks take place at application layer. The best defence is to develop applications where security controls are incorporated as part of the software development cycle and used by developers while writing their code.
OWASP Top 10 Proactive Controls considers security as part of development.
This talk will present the proactive security controls that can be incorporated in development cycle and used while writing the software. By the end of this presentation you will have a better understanding of the recommended security controls that you can incorporate into your software projects. For each control, you will learn which OWASP Top 10 Risks can prevent.
- Secure your web application with 2FA
Rob Allen (https://twitter.com/akrabat), runs Nineteen Feet (https://19ft.com/) and is the author of Zend Framework in Action (http://www.manning.com/allen).
Protecting your users' data with just a username and password is no longer satisfactory. Two-factor authentication (2FA) is the primary method of countering the effects of stolen passwords and is easy to implement in your web application. In this session we will discuss what two-factor authentication is, how it works and the challenges associated with it. We will then look how to integrate two-factor authentication into your PHP application's login workflow. We'll consider both YubiKey and Google Authenticator implementations, so you can make your users' accounts more secure.
--
BaseKit (http://www.basekit.com/) have kindly offered to host the evening at their office, and as always we'll sort out some ales, lagers, soft drinks and snacks. Don't forget to check them out - and if you're looking, they are hiring.
As always, a big thanks to our meetup sponsors Ents24 (http://www.ents24.com/), Brightpearl (http://www.brightpearl.com/), Meanbee (https://www.meanbee.com/) & Deep Blue Sky (http://deepbluesky.com/) without whom we wouldn't be able to put on our meetups.
Afterwards we'll head to the pub, probably the Volunteer Tavern (http://volunteertavern.co.uk/real-ales)!
--
View on the PHPSW website