Meetup code security
- 1. Welcome
- 2. • Data breaches • LinkedIn : 165 million users • Facebook : 553 million users • New problem • Crypto theft • NFT theft The Loss
- 3. • Code is conceived • Design ( checklist or if tools is available ) • Cloud Architecture and Design reviews (OWASP checklists) • Code is born • IDE tools • Signing your code • Code becomes mature • Testing tools (OSS-Fuzz) • Testing checklist • Code is exposed to the world • Protect from Supply chain attacks (https://www.sigstore.dev/) • Make sure dependencies are secure (Snyk, Sonatype) Life of Code Design Coding Testing Production
- 4. Recently … • News and Article:- • https://bit.ly/3L914NR • https://zd.net/3gshHFW • Log4j is popular java logging framework. • 60 to 65% Applications use log4j internal or external. • Issue CVE code:-CVE-2021-45105 • Insecure Log4j code • Secure Log4j code
- 5. The Loss
- 6. Code is conceived • Design and Architecture review • Consider cloud and non-cloud deployments • Review major security aspects • Identity access management • Encryption • Threat monitoring • Data privacy & compliance • Automated security testing Life of Code Design
- 7. Code is born • Use automated code review tools • Follow Security Guidelines • Sign your code • Tools: • Sonar for Java – Angular • Security IntelliSense and .NET Security Guard for C# • Branch protection in GitHub and Azure Life of Code Coding
- 8. Microsoft security rules .NET security tools Security IntelliSense .NET Security Guard .NET Security Features
- 9. Sonar dashboards Github integration Dashboards and Github integrations
- 10. Protection against developer identity theft What does signed code looks like How you can sign your code Code Signing
- 11. Security starts at code Embed security from early stages. Right from Design. Every developer should use automated tools Integrate code security checks Take aways
Editor's Notes
- #3: Good morning everyone!! Hope you all are doing great!! As we all know that we are gathered here to collect somethings about Software Testing. Amm, wondering what Software Testing is? You have reached a right place where you can get all of your answers. Hello, hello, I am Taruna Chudasama with my colleague Falguni Patel from iFour technolab to deliver you a Seminar on Software Testing. so let’s get started. Here you can see the contents that we are going to cover today in this session. First of all, introduction to Software Testing, amm, it will contain the basic idea of what Software Testing is all about. Also we will discuss about the benefits, challenges, and future Software Testing. Also, you all will be given a chance to ask us the questions in the end. So, let’s start with what Software Testing is, with an example.
- #4: Good morning everyone!! Hope you all are doing great!! As we all know that we are gathered here to collect somethings about Software Testing. Amm, wondering what Software Testing is? You have reached a right place where you can get all of your answers. Hello, hello, I am Taruna Chudasama with my colleague Falguni Patel from iFour technolab to deliver you a Seminar on Software Testing. so let’s get started. Here you can see the contents that we are going to cover today in this session. First of all, introduction to Software Testing, amm, it will contain the basic idea of what Software Testing is all about. Also we will discuss about the benefits, challenges, and future Software Testing. Also, you all will be given a chance to ask us the questions in the end. So, let’s start with what Software Testing is, with an example.
- #6: Good morning everyone!! Hope you all are doing great!! As we all know that we are gathered here to collect somethings about Software Testing. Amm, wondering what Software Testing is? You have reached a right place where you can get all of your answers. Hello, hello, I am Taruna Chudasama with my colleague Falguni Patel from iFour technolab to deliver you a Seminar on Software Testing. so let’s get started. Here you can see the contents that we are going to cover today in this session. First of all, introduction to Software Testing, amm, it will contain the basic idea of what Software Testing is all about. Also we will discuss about the benefits, challenges, and future Software Testing. Also, you all will be given a chance to ask us the questions in the end. So, let’s start with what Software Testing is, with an example.
- #7: Good morning everyone!! Hope you all are doing great!! As we all know that we are gathered here to collect somethings about Software Testing. Amm, wondering what Software Testing is? You have reached a right place where you can get all of your answers. Hello, hello, I am Taruna Chudasama with my colleague Falguni Patel from iFour technolab to deliver you a Seminar on Software Testing. so let’s get started. Here you can see the contents that we are going to cover today in this session. First of all, introduction to Software Testing, amm, it will contain the basic idea of what Software Testing is all about. Also we will discuss about the benefits, challenges, and future Software Testing. Also, you all will be given a chance to ask us the questions in the end. So, let’s start with what Software Testing is, with an example.
- #8: Good morning everyone!! Hope you all are doing great!! As we all know that we are gathered here to collect somethings about Software Testing. Amm, wondering what Software Testing is? You have reached a right place where you can get all of your answers. Hello, hello, I am Taruna Chudasama with my colleague Falguni Patel from iFour technolab to deliver you a Seminar on Software Testing. so let’s get started. Here you can see the contents that we are going to cover today in this session. First of all, introduction to Software Testing, amm, it will contain the basic idea of what Software Testing is all about. Also we will discuss about the benefits, challenges, and future Software Testing. Also, you all will be given a chance to ask us the questions in the end. So, let’s start with what Software Testing is, with an example.
- #13: Thank You.