Dan Bergh Johnsson & Daniel Deogun — Domain-Driven Security скачать в хорошем качестве

Dan Bergh Johnsson & Daniel Deogun — Domain-Driven Security

Domain-Driven Design Europe 2016 - Brussels, January 26-29 2016 http://dddeurope.com -   / ddd_eu   Arm yourself with Domain Driven Security. It’s time to slay some security trolls… We all know we have people like Anonymous, LulzSec, and NSA around. With this in mind, shouldn’t we start thinking about the security of our systems? Well, of course. But, could you turn your knowledge of DDD into an advantage for understanding and counteracting security vulnerabilities? Yes, you could. This session is about exactly that. “Business” and “technical” attacks are two kinds of attacks, where the latter is the most famous, e g SQL Injection and Cross-Site Scripting. But this doesn’t mean business attacks are less harmful. On the contrary, attacks on the business tend to be extremely sophisticated and powerful as they often leave the infrastructure intact and trigger no alarms. Domain Driven Security is the field that counteracts both types of attacks by using tools and mindsets from DDD in a clever way.