A couple weeks ago I presented on Rails security at a local Ruby On Rails meetup. I finally got around to posting the slides online.
The presentation covers topics including authentication, hashing, salting, key stretching, white listing, session hijacking, replay attacks, session fixation, cross-site request forgery, cross site scripting, sql injections, other injections, and some other Rails related security issues. Let me know if you have questions and please give me some feedback. I didn’t get too creative with the presentation because there was a lot of content to cover.
Defending Against Attacks With Rails
View more presentations from Tony Amoyal.
No TweetBacks yet. (Be the first to Tweet this post)
If you enjoyed this post, make sure you subscribe to my RSS feed!
One Trackback
[...] nice with your jQuery POST requests. By the way, if you don’t know what CSRF is, check out my Ruby on Rails security presentation. You need to send an Authenticity Token with each POST request and jQuery does not do that for you [...]