Node.js Secure Coding - Liran Tal - ASW #286

Application Security Weekly (Video)

English - May 21, 2024 13:42 - 38 minutes - 167 MB Video - ★★★★ - 5 ratings
Technology News Tech News devops applicationsecurityweekly appsec asw keithhoodlet paulasadoorian sdlcsecurity technology video Homepage Download Apple Podcasts Google Podcasts Overcast Castro Pocket Casts RSS feed

Previous Episode: The Enterprise Browser & AI in Securing Software and Supply Chains - Mike Fey, Josh Lemos - ASW #285

Next Episode: Unpacking XDR & Business Applications - Chris Thomas, Oliver Tavakoli - ASW #286

Secure coding education should be more than a list of issues or repeating generic advice. Liran Tal explains his approach to teaching developers through examples that start with exploiting known vulns and end with discussions on possible fixes. Not only does this create a more engaging experience, but it also relies on code that looks familiar to developers rather than contrived or overly simplistic examples.

Segment resources:

https://github.com/lirantal https://cheatsheetseries.owasp.org/cheatsheets/NPMSecurityCheat_Sheet.html https://lirantal.com/blog/poor-express-authentication-patterns-nodejs

Show Notes: https://securityweekly.com/asw-286