DerbyCon Talk Info

Taking a page from @theprez98‘s book I thought I’d put out a quick post that to say that I’ll be speaking at DerbyCon in Louisville, KY (September 27-30, 2012)! Here is my talk info:

Title: PHP Website Security, Attack Analysis, & Mitigations

Abstract: PHP is a very powerful language for easily developing web applications however with this power comes great responsibility … and in this case that means not shooting yourself in the foot with lax security practices. Issues can arise from everything from language vulnerabilities and weak default settings to insecure coding practices and misconfigurations. This presentation plans to address many of these concerns by providing valuable lessons in the security of, attacks against, and management of PHP in your environment. The talk begins with an overview of PHP security, including it’s known issues and corresponding security enhancements the maintainers have incorporated over time. Beginning with an in-depth discussion of Suhosin and how it can be used to lock down your PHP environment, the presentation next details PHPIDS and how it can be used to detect PHP-centric threats. The talk closes with a strategy for analyzing the risks in your PHP environment and applying corresponding PHP and platform/network mitigations to minimize your attack surface.

The schedule is here.

Hope to see you there!

#####

Today’s post pic is from notANON.com. See ya!

6 comments for “DerbyCon Talk Info

  1. August 17, 2012 at 8:04 pm

    BLOGGED: DerbyCon Talk Info http://t.co/wSjHhJF6

  2. August 17, 2012 at 8:08 pm

    DerbyCon Talk Info: Taking a page from @theprez98‘s book I thought I’d put out a quick post that to say that … http://t.co/nXfOAEUQ

  3. August 17, 2012 at 8:44 pm

    #NoVABloggers DerbyCon Talk Info http://t.co/1ptvVtg3

  4. August 17, 2012 at 9:15 pm

    #NOVABLOGGER: DerbyCon Talk Info http://t.co/tXkBrnyE http://t.co/IntXkFbO

  5. August 18, 2012 at 3:17 am

    DerbyCon Talk Info: [nova#infosecportal.com] Taking a page from @ theprez98 ‘s book I thought I’d put out a quick… http://t.co/uWIdzFV9

  6. August 18, 2012 at 4:05 am

    DerbyCon Talk Info: [nova#infosecportal.com] Taking a page from @ theprez98 ‘s book I thought I’d put out a quick… http://t.co/bZizvcxx

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.