Overview
Explore the concept of externalizing DMZ as a service in the cloud through this 53-minute conference talk from BSides Boston 2015. Delve into web DMZ architecture, web application firewalls, and various types of attacks. Learn about secure development lifecycle practices and application security measures. Examine the differences between whitelist and blacklist approaches in web application firewalls, complete with examples. Gain insights from Israel Barak's expertise and participate in a Q&A session to deepen your understanding of cloud security strategies.
Syllabus
Introduction
Agenda
About Israel
Questions
Web DMZ Architecture
Web Application Firewall
Types of Attacks
Secure Development Lifecycle
Application Security
Whitelist Web Application Firewall
Example
Blacklist
Examples
QA