Project a Secure Web 2.0 (using Drupal) Paolo Ottolino PMP - PowerPoint PPT Presentation

Apr 18, 2023 •26 likes •286 views

Project a Secure Web 2.0 (using Drupal) Paolo Ottolino PMP CISSP-ISSAP CISA CISM OPST ITIL paolo.ottolino (at) isc2chapter-italy.it May XX, 2016 Agenda Web 2.0 & CMS CMS Cyber Risk Drupal Security Agenda Web 2.0 & CMS Needs,

Project a Secure Web 2.0 (using Drupal) Paolo Ottolino PMP CISSP-ISSAP CISA CISM OPST ITIL paolo.ottolino (at) isc2chapter-italy.it May XX, 2016
Agenda Web 2.0 & CMS CMS Cyber Risk Drupal Security
Agenda Web 2.0 & CMS Needs, Functionalities, Selection
Web 2.0: Insecure by Design?
Web 2.0 & CMS: Logical Architecture
CMS Solution: Top 3 used products
Most wanted CMS Functionalities…
UK and EU Org & Biz use Drupal…
… but also US makes strong use of Drupal!
Full CMS Functionalities
Agenda CMS Cyber Risk Threats, Vulnerabilities, Countermeasures
CMS Threats: Security Hacking
CMS Vulnerabilities: Open Web Application SecurityProject
CMS Vulnerabilities: OWASP Top10
CMS Risks: Risk-Threat-Vulnerability Map
CMS Risks: DevOps Security Strategy
CMS Risks: DevOps Security Strategy
Agenda Drupal Security Security DevOps, Keeping Secure, Drupal 8
Drupal Security DevOps Strategy
Keeping Secure: CMS Patch Comparison
Keeping Secure: Drupal actors (1/2)
Keeping Secure: Drupal process (2/2)
Keeping Secure: Drupal process (2/2)
Drupal8: Cover the Lacking Functionalities…
Drupal 8: Welcome Easiness!
Grazie Paolo Ottolino PMP CISSP-ISSAP CISA CISM OPST ITIL paolo.ottolino (at) isc2chapter-italy.it

Recommend

How Secure are Secure How Secure are Secure Interdomain Routing Protocols? Interdomain Routing

DIMACS Workshop On Secure Routing March 10, 2010 How Secure are Secure How Secure are Secure Interdomain Routing Protocols? Interdomain Routing Protocols? $ $ Sharon Goldberg Microsoft Research & Boston University y Michael Schapira

701 views • 54 slides

Alvirne 2020 Budget Committee Presentation November 6, 2019 Project Priorities 1. Safe/secure

Alvirne 2020 Budget Committee Presentation November 6, 2019 Project Priorities 1. Safe/secure building entrance and Main Office 2. Safe/secure drop-off sequence (site improvements) 3. Improved function for high school cafeteria (student

221 views • 20 slides

Project: Embedded SMC What is Secure Computa1on [SMC] A B

Project: Embedded SMC What is Secure Computa1on [SMC] A B Compute f(A, B) Without revealing A to Bob and B to Alice

510 views • 24 slides

Advanced Tools from Modern Cryptography Lecture 12 MPC: UC-secure OT UC-Secure OT UC-secure

Advanced Tools from Modern Cryptography Lecture 12 MPC: UC-secure OT UC-Secure OT UC-secure OT is impossible (even against PPT adversaries) in the plain model (i.e., without the help of another functionality) But possible from simple

527 views • 16 slides

PROJECT: PROPOSAL TO THE UN ECE OF AN HARMONIZED, SECURE AND ENHANCED IDP By the FIA / AIT WP 1

PROJECT: PROPOSAL TO THE UN ECE OF AN HARMONIZED, SECURE AND ENHANCED IDP By the FIA / AIT WP 1 73 rd session 2016 FIA / AIT INDEX 1. Introduction 2. Research & actions taken 1. Research: stakeholders perception 2. Research:

710 views • 31 slides

and Web Applications 06 Secure Coding Alexandros Labrinidis University of Pittsburgh Secure

CS 1655 / Spring 2010 Secure Data Management and Web Applications 06 Secure Coding Alexandros Labrinidis University of Pittsburgh Secure Coding From: Secure Coding: Principles and Practices by Mark G. Graff & Kenneth R. Van Wyk

753 views • 17 slides

Be Be Good! Good! WHA WHAT IS T IS SECURE? SECURE? SECURe is a school-wide program designed

SECUR E SOCIAL, EMOTIONAL, AND COGNITIVE UNDERSTANDING AND REGULATION Created by Success for All, University of Michigan, and Harvard University Be Be Good! Good! WHA WHAT IS T IS SECURE? SECURE? SECURe is a school-wide program designed

957 views • 59 slides

Secure Coprocessor What is Secure coprocessor: Robust. (A system that is not easily or is

Secure Coprocessor What is Secure coprocessor: Robust. (A system that is not easily or is not wholly affected by a bug in one aspect of it. ) General-purpose computational environments. Secure temper responsive physical package.

366 views • 14 slides

Semi-Secure Semi-Secure where a hash is a secure one-way function. A cookie is a bit of state

One-Slide Summary Users often authenticate themselves by providing passwords. We store and compare hashes of passwords, Semi-Secure Semi-Secure where a hash is a secure one-way function. A cookie is a bit of state associated with a webpage

103 views • 9 slides

Defeating Secure Boot with EMFI Ang Cui, PhD & Rick Housley {a|r}@redballoonsecurity.com

Defeating Secure Boot with EMFI Ang Cui, PhD & Rick Housley {a|r}@redballoonsecurity.com PROJECT 1. Open-source project to democratize EMFI research 2. 2 years of work so far PROJECT Disclaimer: BadFET-style EMFI research is

1.55k views • 126 slides

SECURE HOME GATEWAY PROJECT ICANN63 BARCELONA OCTOBER 22, 2018 Jacques Latour, CTO, CIRA Labs

SECURE HOME GATEWAY PROJECT ICANN63 BARCELONA OCTOBER 22, 2018 Jacques Latour, CTO, CIRA Labs Canadian Internet Registration Authority Jacques.Latour [@] cira.ca Today's home network and IoT products and solutions lack secure testing and

696 views • 24 slides

Security Framework for the IPv6 Era SUZUKI, Shinsuke (Hitachi, Ltd. / KAME Project / WIDE Project

Security Framework for the IPv6 Era SUZUKI, Shinsuke (Hitachi, Ltd. / KAME Project / WIDE Project Secure-6 WG) suz@crl.hitachi.co.jp / suz@kame.net HIROMI, Ruri (Intec NetCore, Inc. / WIDE Project Secure-6 WG) hiromi@inetcore.com Apricot2005,

628 views • 18 slides

THE SECURE PROJECT: SOME RESULTS COMING FROM THE RESEARCH OF SCIENCE CURRICULA AND TEACHERS

THE SECURE PROJECT: SOME RESULTS COMING FROM THE RESEARCH OF SCIENCE CURRICULA AND TEACHERS AND LEARNERS OPINIONS ON SCIENCE EDUCATION . Job de Meyere (1) , Dagmara Sokolowska (2) , Elvira Folmer (3) , Barbara Rovsek (4) , Wim Peeters (5)

671 views • 44 slides

NISTs Industrial Control System (ICS) Security Project Presented at the: Secure Manufacturing

NISTs Industrial Control System (ICS) Security Project Presented at the: Secure Manufacturing in the Age of Globalization Workshop November 28, 2007 Stuart Katzke and Keith Stouffer National Institute of Standards and Technology

767 views • 40 slides

Secure Returns SAFE AS A VAULT Secure SECONDS TO UPLOAD Efficient ACCESSIBLE ANYWHERE

Secure Returns SAFE AS A VAULT Secure SECONDS TO UPLOAD Efficient ACCESSIBLE ANYWHERE Convenient What is Secure Returns ? Secure Returns is a secure website where you and your clients can securely upload & download confidential

202 views • 9 slides

Project Things A secure gateway to connect your things to Internet February 2, 2019

Project Things A secure gateway to connect your things to Internet February 2, 2019 <https://fosdem.org/2019/schedule/event/project_things> Speakers Dipesh Monga @ Mozilla Techspeakers Philippe Coval @ Samsung OpenSource 2 The hidden

558 views • 28 slides

Concurrently Secure Protocols Huijia (Rachel) Lin Rafael Pass MIT & BU Cornell Secure MPC

Black-Box Constructions of Concurrently Secure Protocols Huijia (Rachel) Lin Rafael Pass MIT & BU Cornell Secure MPC Secure MPC Goal: Allow a set of distrustful parties to compute ANY function f on their own Secure MPC Goal: Allow a set

1.11k views • 98 slides

Who tells you that your secure product is actually secure?

Who tells you that your secure product is actually secure? Think about the 6me it stays on the field It went through a security evalua6on

866 views • 28 slides

NDS2 Secure storage, sharing and publishing of data in the NDS Maciej Brzeniak,

NDS2 Secure storage, sharing and publishing of data in the NDS Maciej Brzeniak, Supercomputing Dept. of PSNC, www.psnc.pl TF-Storage meeting @Dubrovnik, Sep., 26-27th 2012 Project funded by: NCBiR for 2011-2013 under KMD2 project (no.

769 views • 21 slides

SPaCIoS Secure Provision and Consumption in the Internet of Services STREP Project number: 257876

SPaCIoS Secure Provision and Consumption in the Internet of Services STREP Project number: 257876 Objective ICT-2009.1.4 c: Technology and Tools for Trustworthy ICT 01 Oct 2010 30 Sep 2013 www.spacios.eu Alexander Pretschner, POFI 2011,

780 views • 24 slides

What is Secure? Engineering Secure Software Last Revised: August 19, 2020 SWEN-331: Engineering

What is Secure? Engineering Secure Software Last Revised: August 19, 2020 SWEN-331: Engineering Secure Software Benjamin S Meyers 1 Recent Security Incidents Garmin Ransomware -- $10 million Sync servers down for many days

506 views • 21 slides

Secure and Efficient Access to Outsourced Data Secure and Efficient Access to Outsourced Data

Secure and Efficient Access to Outsourced Data Secure and Efficient Access to Outsourced Data Weichao Wang, Zhiwei Li, Rodney Owens, Bharat Bhargava CCSW 2009: The ACM Cloud Computing Security Workshop 1 The Problem Providing secure and

414 views • 19 slides

Measure GG ICOC Presentation June 21, 2018 1 Project Overview Create a safe and secure

Measure GG ICOC Presentation June 21, 2018 1 Project Overview Create a safe and secure environment Connect the school to the community: put active uses at the edges Prioritize green space and views. Provide ample play space. Improve traffic

999 views • 52 slides

Project Plan Secure Application Layer API Proxy The Capstone Experience Team Symantec Lauren

Project Plan Secure Application Layer API Proxy The Capstone Experience Team Symantec Lauren Allswede Steven Kneiser Jacob Carl TJ Kelly Yili Luo Department of Computer Science and Engineering Michigan State University Fall 2017 From

265 views • 12 slides