SlideShare a Scribd company logo

Security On Rails

Jonathan Weiss, profile picture
Jonathan Weiss

The document presents a security overview of Ruby on Rails by Jonathan Weiss, a consultant specializing in Rails and security. It discusses the application stack, focusing on setup, deployment, information leaks, vulnerabilities, and best practices. The agenda emphasizes the importance of securing Rails applications effectively.

Technology
1 of 47
Downloaded 93 times
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails
Security On Rails

More Related Content

PDF
Basic detection tests of McAfee ENS + MVISION Insights usage for SunBurst threat
Vladyslav Radetsky
 
PDF
Mod Security
Abhishek Singh
 
PDF
CiscoCertificate
kevin Chendjou
 
PDF
Cyberdefense in depth with validy technology
Gilles Sgro
 
PDF
Roof safety systems cpd
Marie Wilson
 
PDF
Russia the threat landscape
Альбина Минуллина
 
PPTX
CLUSIR INFONORD OWASP iot 2014
Sebastien Gioria
 
PDF
The Next Generation Security
Cybera Inc.
 
Basic detection tests of McAfee ENS + MVISION Insights usage for SunBurst threat
Vladyslav Radetsky
 
Mod Security
Abhishek Singh
 
CiscoCertificate
kevin Chendjou
 
Cyberdefense in depth with validy technology
Gilles Sgro
 
Roof safety systems cpd
Marie Wilson
 
Russia the threat landscape
Альбина Минуллина
 
CLUSIR INFONORD OWASP iot 2014
Sebastien Gioria
 
The Next Generation Security
Cybera Inc.
 

What's hot (19)

PDF
vip prot nir 2007
Nir David
 
PDF
Cyberbarbarian copy
David Appelbaum
 
PPTX
Segurança da era do ssl everywhere
rodolfovillordo
 
PDF
Secure Coding for Java - An Introduction
Sebastien Gioria
 
PPTX
[Cisco Connect 2018 - Vietnam] Eric rennie sw cisco_connect
Nur Shiqim Chok
 
ODP
A pinguin as a bouncer... Open Source Security Solutions
B.A.
 
PPTX
A day in the life of a pentester
Cláudio André
 
PPTX
Breaking the cyber kill chain!
Nahidul Kibria
 
PDF
OWASP, PHP, life and universe
Sebastien Gioria
 
PDF
Evolución de la Ciber Seguridad
Cristian Garcia G.
 
PDF
BitSensor Webwinkel Vakdagen
webwinkelvakdag
 
PPTX
SOPHOS presentation used during the SWITCHPOINT NV/SA Quarterly Experience Da...
SWITCHPOINT NV/SA
 
PPTX
WatchGuard - Cryptolocker en het gevecht tegen IT 's grootste vijand - Orbid ...
Orbid
 
PPTX
Preventing Today's Malware
David Perkins
 
PDF
Cyber Security Challenges: how are we facing them?
Community Protection Forum
 
PPSX
SonicWALL Advanced Features
David Perkins
 
PDF
CISCO CCNA Security Certificate
Kacem CHAMMALI
 
PDF
IoT security
Abhishek Dwivedi
 
PDF
Network Hacking Training - Course Gate
Course Gate
 
vip prot nir 2007
Nir David
 
Cyberbarbarian copy
David Appelbaum
 
Segurança da era do ssl everywhere
rodolfovillordo
 
Secure Coding for Java - An Introduction
Sebastien Gioria
 
[Cisco Connect 2018 - Vietnam] Eric rennie sw cisco_connect
Nur Shiqim Chok
 
A pinguin as a bouncer... Open Source Security Solutions
B.A.
 
A day in the life of a pentester
Cláudio André
 
Breaking the cyber kill chain!
Nahidul Kibria
 
OWASP, PHP, life and universe
Sebastien Gioria
 
Evolución de la Ciber Seguridad
Cristian Garcia G.
 
BitSensor Webwinkel Vakdagen
webwinkelvakdag
 
SOPHOS presentation used during the SWITCHPOINT NV/SA Quarterly Experience Da...
SWITCHPOINT NV/SA
 
WatchGuard - Cryptolocker en het gevecht tegen IT 's grootste vijand - Orbid ...
Orbid
 
Preventing Today's Malware
David Perkins
 
Cyber Security Challenges: how are we facing them?
Community Protection Forum
 
SonicWALL Advanced Features
David Perkins
 
CISCO CCNA Security Certificate
Kacem CHAMMALI
 
IoT security
Abhishek Dwivedi
 
Network Hacking Training - Course Gate
Course Gate
 
Ad

Similar to Security On Rails (20)

PDF
Deploying And Monitoring Rails
Jonathan Weiss
 
PDF
Enterprise Security mit Spring Security
Mike Wiesner
 
PDF
24 031030davidtillemanssecuresdlcpub-110325054740-phpapp02
Smals
 
PPTX
[DSBW Spring 2009] Unit 08: WebApp Security
Carles Farré
 
PPTX
Containers At-Risk: A Review of 21,000 Cloud Environments
Lacework
 
PDF
2021 01-13 reducing risk-of_ransomware
AlgoSec
 
PDF
Kubernetes meetup k8s_aug_2019
dhubbard858
 
PDF
Secure Programming With Static Analysis
ConSanFrancisco123
 
PPTX
Wireless Pentesting: It's more than cracking WEP
Joe McCray
 
PPT
Mobile application security and threat modeling
Shantanu Mitra
 
PPTX
Pegasus Spyware - What You Need to Know
Skycure
 
PDF
Threats, Threat Modeling and Analysis
Ian G
 
PDF
pegasus-whatyouneedtoknow-160916194631 (1).pdf
064ChetanWani
 
PDF
Building Cloud Applications Based On Zero Trust
Mahesh Patil
 
PDF
Don’t have a Meltdown! Practical Steps for Defending Your Apps
Docker, Inc.
 
PDF
ZendCon Security
philipo
 
PPTX
Lacework Kubernetes Meetup | August 28, 2018
Lacework
 
PDF
Caspa Preservabl Infrastructure Luigi Briguglio
DigitalPreservationEurope
 
PDF
Optimizing Spark Deployments for Containers: Isolation, Safety, and Performan...
Spark Summit
 
PPTX
Yes, you can be pci compliant using a public iaas cloud a case study by phi...
Khazret Sapenov
 
Deploying And Monitoring Rails
Jonathan Weiss
 
Enterprise Security mit Spring Security
Mike Wiesner
 
24 031030davidtillemanssecuresdlcpub-110325054740-phpapp02
Smals
 
[DSBW Spring 2009] Unit 08: WebApp Security
Carles Farré
 
Containers At-Risk: A Review of 21,000 Cloud Environments
Lacework
 
2021 01-13 reducing risk-of_ransomware
AlgoSec
 
Kubernetes meetup k8s_aug_2019
dhubbard858
 
Secure Programming With Static Analysis
ConSanFrancisco123
 
Wireless Pentesting: It's more than cracking WEP
Joe McCray
 
Mobile application security and threat modeling
Shantanu Mitra
 
Pegasus Spyware - What You Need to Know
Skycure
 
Threats, Threat Modeling and Analysis
Ian G
 
pegasus-whatyouneedtoknow-160916194631 (1).pdf
064ChetanWani
 
Building Cloud Applications Based On Zero Trust
Mahesh Patil
 
Don’t have a Meltdown! Practical Steps for Defending Your Apps
Docker, Inc.
 
ZendCon Security
philipo
 
Lacework Kubernetes Meetup | August 28, 2018
Lacework
 
Caspa Preservabl Infrastructure Luigi Briguglio
DigitalPreservationEurope
 
Optimizing Spark Deployments for Containers: Isolation, Safety, and Performan...
Spark Summit
 
Yes, you can be pci compliant using a public iaas cloud a case study by phi...
Khazret Sapenov
 
Ad

More from Jonathan Weiss (20)

PDF
Docker on AWS OpsWorks
Jonathan Weiss
 
PDF
ChefConf 2014 - AWS OpsWorks Under The Hood
Jonathan Weiss
 
PDF
AWS OpsWorks & Chef at the Hamburg Chef User Group 2014
Jonathan Weiss
 
PPTX
DevOpsDays Amsterdam - Observations in the cloud
Jonathan Weiss
 
PDF
Amazon SWF and Gordon
Jonathan Weiss
 
PDF
Introduction to Backbone.js
Jonathan Weiss
 
PDF
Scalarium and CouchDB
Jonathan Weiss
 
PDF
Build your own clouds with Chef and MCollective
Jonathan Weiss
 
PDF
NoSQL - Motivation and Overview
Jonathan Weiss
 
PDF
NoSQL - An introduction to CouchDB
Jonathan Weiss
 
PDF
Running on Amazon EC2
Jonathan Weiss
 
PDF
Amazon EC2 in der Praxis
Jonathan Weiss
 
PDF
Infrastructure Automation with Chef
Jonathan Weiss
 
PDF
Rails in the Cloud
Jonathan Weiss
 
PDF
EventMachine
Jonathan Weiss
 
PDF
CouchDB on Rails
Jonathan Weiss
 
PDF
Rails in the Cloud - Experiences from running on EC2
Jonathan Weiss
 
PDF
CouchDB on Rails - RailsWayCon 2010
Jonathan Weiss
 
PDF
CouchDB on Rails - FrozenRails 2010
Jonathan Weiss
 
PDF
NoSQL - Post-Relational Databases - BarCamp Ruhr3
Jonathan Weiss
 
Docker on AWS OpsWorks
Jonathan Weiss
 
ChefConf 2014 - AWS OpsWorks Under The Hood
Jonathan Weiss
 
AWS OpsWorks & Chef at the Hamburg Chef User Group 2014
Jonathan Weiss
 
DevOpsDays Amsterdam - Observations in the cloud
Jonathan Weiss
 
Amazon SWF and Gordon
Jonathan Weiss
 
Introduction to Backbone.js
Jonathan Weiss
 
Scalarium and CouchDB
Jonathan Weiss
 
Build your own clouds with Chef and MCollective
Jonathan Weiss
 
NoSQL - Motivation and Overview
Jonathan Weiss
 
NoSQL - An introduction to CouchDB
Jonathan Weiss
 
Running on Amazon EC2
Jonathan Weiss
 
Amazon EC2 in der Praxis
Jonathan Weiss
 
Infrastructure Automation with Chef
Jonathan Weiss
 
Rails in the Cloud
Jonathan Weiss
 
EventMachine
Jonathan Weiss
 
CouchDB on Rails
Jonathan Weiss
 
Rails in the Cloud - Experiences from running on EC2
Jonathan Weiss
 
CouchDB on Rails - RailsWayCon 2010
Jonathan Weiss
 
CouchDB on Rails - FrozenRails 2010
Jonathan Weiss
 
NoSQL - Post-Relational Databases - BarCamp Ruhr3
Jonathan Weiss
 

Recently uploaded (20)

PDF
A comparative study of natural language inference in Swahili using monolingua...
IAESIJAI
 
PPTX
SOPHOS-XG Firewall Administrator PPT.pptx
AgnesMunisi
 
PPTX
TLE Review Electricity (Electricity).pptx
JayPolicarpio2
 
PDF
Encapsulation theory and applications.pdf
gurumoop
 
PDF
1 - Historical Antecedents, Social Consideration.pdf
tuazon2030627
 
PPTX
Chapter 5: Probability Theory and Statistics
RandyFin
 
PDF
Zenith AI: Advanced Artificial Intelligence
Biz Preneurs
 
PDF
Heart disease approach using modified random forest and particle swarm optimi...
IAESIJAI
 
PDF
Transform Your ITIL® 4 & ITSM Strategy with AI in 2025.pdf
PDCA Consulting
 
PDF
gpt5_lecture_notes_comprehensive_20250812015547.pdf
Chinchu40
 
PDF
project resource management chapter-09.pdf
ssuser00e6e21
 
PDF
Univ-Connecticut-ChatGPT-Presentaion.pdf
ry7r52mzb4
 
PDF
DP Operators-handbook-extract for the Mautical Institute
LeonelMejiaLarios
 
PPTX
1. Introduction to Computer Programming.pptx
bonakiduza1024
 
PDF
A comparative analysis of optical character recognition models for extracting...
IAESIJAI
 
PDF
NewMind AI Weekly Chronicles - August'25-Week II
NewMind AI
 
PPTX
Tartificialntelligence_presentation.pptx
ry7r52mzb4
 
PDF
From MVP to Full-Scale Product A Startup’s Software Journey.pdf
KodekX
 
PDF
August Patch Tuesday
Ivanti
 
PPTX
cloud_computing_Infrastucture_as_cloud_p
mainakbhattacharya20
 
A comparative study of natural language inference in Swahili using monolingua...
IAESIJAI
 
SOPHOS-XG Firewall Administrator PPT.pptx
AgnesMunisi
 
TLE Review Electricity (Electricity).pptx
JayPolicarpio2
 
Encapsulation theory and applications.pdf
gurumoop
 
1 - Historical Antecedents, Social Consideration.pdf
tuazon2030627
 
Chapter 5: Probability Theory and Statistics
RandyFin
 
Zenith AI: Advanced Artificial Intelligence
Biz Preneurs
 
Heart disease approach using modified random forest and particle swarm optimi...
IAESIJAI
 
Transform Your ITIL® 4 & ITSM Strategy with AI in 2025.pdf
PDCA Consulting
 
gpt5_lecture_notes_comprehensive_20250812015547.pdf
Chinchu40
 
project resource management chapter-09.pdf
ssuser00e6e21
 
Univ-Connecticut-ChatGPT-Presentaion.pdf
ry7r52mzb4
 
DP Operators-handbook-extract for the Mautical Institute
LeonelMejiaLarios
 
1. Introduction to Computer Programming.pptx
bonakiduza1024
 
A comparative analysis of optical character recognition models for extracting...
IAESIJAI
 
NewMind AI Weekly Chronicles - August'25-Week II
NewMind AI
 
Tartificialntelligence_presentation.pptx
ry7r52mzb4
 
From MVP to Full-Scale Product A Startup’s Software Journey.pdf
KodekX
 
August Patch Tuesday
Ivanti
 
cloud_computing_Infrastucture_as_cloud_p
mainakbhattacharya20