What it takes to defend an application

Abstract

This session is an attempt to understand what would it take to defend an application. not just from web application security point but also external factors like server security to service provider selection to administrator’s laptop. This is high level overview of the security protections one should be thinking of while deploying an application. The session is conducted assuming a web application with fixed set of requirements is to be hosted and company has list of potential abusers and then discussion around what kind of protections should be present.

Slides