Web Security - Beyond Lists

Understanding what can happen-- i.e vulnerability lists-- is a great start in your journey. But what is more important is how you apply successful strategies-- both in code AND in process-- that prevent people from stealing your lunch money. This presentation will cover philosophies, principles, and strategies used to secure web applications beyond simplistic vulnerability lists. It will focus on things you could (and should) be doing right now and provide some direction on where you might consider going in the future.