Security in Drupal: what can go wrong?
Let's "get off the island" and look at Drupal security from the point of view of an outsider.
The OWASP Top Ten is an industry standard list of the most common vulnerabilities that can affect web sites. This session will start with an overview of the Top Ten, and then take a more detailed look at a few of these vulnerabilities. We will review some actual Drupal security advisories:
What the vulnerability looks like
How the Drupal security team communicates the problem
The code that was updated to fix the problem
The presenter is a provisional member of the Drupal security team.
Presenter
Benji Fisher of Fruition
Benji is an active member of the Drupal community:
member of the usability team
co-maintainer of the Migrate API
provisional member of the security team
He often helps out on the #ux and #migration channels in Drupal Slack.
Outside of Drupal, Benji enjoys bicycling, square dancing, bridge, yoga, and puzzles (mathematical and mechanical).
https://www.drupalasheville.com/2022/session/security-drupal-what-can-go-wrong
The OWASP Top Ten is an industry standard list of the most common vulnerabilities that can affect web sites. This session will start with an overview of the Top Ten, and then take a more detailed look at a few of these vulnerabilities. We will review some actual Drupal security advisories:
What the vulnerability looks like
How the Drupal security team communicates the problem
The code that was updated to fix the problem
The presenter is a provisional member of the Drupal security team.
Presenter
Benji Fisher of Fruition
Benji is an active member of the Drupal community:
member of the usability team
co-maintainer of the Migrate API
provisional member of the security team
He often helps out on the #ux and #migration channels in Drupal Slack.
Outside of Drupal, Benji enjoys bicycling, square dancing, bridge, yoga, and puzzles (mathematical and mechanical).
https://www.drupalasheville.com/2022/session/security-drupal-what-can-go-wrong