Project a Secure Web 2.0 (using Drupal) Paolo Ottolino PMP - PowerPoint PPT Presentation

Apr 18, 2023 •26 likes •286 views

Project a Secure Web 2.0 (using Drupal) Paolo Ottolino PMP CISSP-ISSAP CISA CISM OPST ITIL paolo.ottolino (at) isc2chapter-italy.it May XX, 2016 Agenda Web 2.0 & CMS CMS Cyber Risk Drupal Security Agenda Web 2.0 & CMS Needs,

Project a Secure Web 2.0 (using Drupal) Paolo Ottolino PMP CISSP-ISSAP CISA CISM OPST ITIL paolo.ottolino (at) isc2chapter-italy.it May XX, 2016
Agenda Web 2.0 & CMS CMS Cyber Risk Drupal Security
Agenda Web 2.0 & CMS Needs, Functionalities, Selection
Web 2.0: Insecure by Design?
Web 2.0 & CMS: Logical Architecture
CMS Solution: Top 3 used products
Most wanted CMS Functionalities…
UK and EU Org & Biz use Drupal…
… but also US makes strong use of Drupal!
Full CMS Functionalities
Agenda CMS Cyber Risk Threats, Vulnerabilities, Countermeasures
CMS Threats: Security Hacking
CMS Vulnerabilities: Open Web Application SecurityProject
CMS Vulnerabilities: OWASP Top10
CMS Risks: Risk-Threat-Vulnerability Map
CMS Risks: DevOps Security Strategy
CMS Risks: DevOps Security Strategy
Agenda Drupal Security Security DevOps, Keeping Secure, Drupal 8
Drupal Security DevOps Strategy
Keeping Secure: CMS Patch Comparison
Keeping Secure: Drupal actors (1/2)
Keeping Secure: Drupal process (2/2)
Keeping Secure: Drupal process (2/2)
Drupal8: Cover the Lacking Functionalities…
Drupal 8: Welcome Easiness!
Grazie Paolo Ottolino PMP CISSP-ISSAP CISA CISM OPST ITIL paolo.ottolino (at) isc2chapter-italy.it

Download Presentation

Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

How Secure are Secure How Secure are Secure Interdomain Routing Protocols? Interdomain Routing

DIMACS Workshop On Secure Routing March 10, 2010 How Secure are Secure How Secure are Secure Interdomain Routing Protocols? Interdomain Routing Protocols? $ $ Sharon Goldberg Microsoft Research & Boston University y Michael Schapira

701 views • 54 slides

Alvirne 2020 Budget Committee Presentation November 6, 2019 Project Priorities 1. Safe/secure

Alvirne 2020 Budget Committee Presentation November 6, 2019 Project Priorities 1. Safe/secure building entrance and Main Office 2. Safe/secure drop-off sequence (site improvements) 3. Improved function for high school cafeteria (student

221 views • 20 slides

Project: Embedded SMC What is Secure Computa1on [SMC] A B

Project: Embedded SMC What is Secure Computa1on [SMC] A B Compute f(A, B) Without revealing A to Bob and B to Alice

510 views • 24 slides

Advanced Tools from Modern Cryptography Lecture 12 MPC: UC-secure OT UC-Secure OT UC-secure

Advanced Tools from Modern Cryptography Lecture 12 MPC: UC-secure OT UC-Secure OT UC-secure OT is impossible (even against PPT adversaries) in the plain model (i.e., without the help of another functionality) But possible from simple

527 views • 16 slides

PROJECT: PROPOSAL TO THE UN ECE OF AN HARMONIZED, SECURE AND ENHANCED IDP By the FIA / AIT WP 1

PROJECT: PROPOSAL TO THE UN ECE OF AN HARMONIZED, SECURE AND ENHANCED IDP By the FIA / AIT WP 1 73 rd session 2016 FIA / AIT INDEX 1. Introduction 2. Research & actions taken 1. Research: stakeholders perception 2. Research:

710 views • 31 slides

and Web Applications 06 Secure Coding Alexandros Labrinidis University of Pittsburgh Secure

CS 1655 / Spring 2010 Secure Data Management and Web Applications 06 Secure Coding Alexandros Labrinidis University of Pittsburgh Secure Coding From: Secure Coding: Principles and Practices by Mark G. Graff & Kenneth R. Van Wyk

753 views • 17 slides

Be Be Good! Good! WHA WHAT IS T IS SECURE? SECURE? SECURe is a school-wide program designed

SECUR E SOCIAL, EMOTIONAL, AND COGNITIVE UNDERSTANDING AND REGULATION Created by Success for All, University of Michigan, and Harvard University Be Be Good! Good! WHA WHAT IS T IS SECURE? SECURE? SECURe is a school-wide program designed

957 views • 59 slides

Secure Coprocessor What is Secure coprocessor: Robust. (A system that is not easily or is

Secure Coprocessor What is Secure coprocessor: Robust. (A system that is not easily or is not wholly affected by a bug in one aspect of it. ) General-purpose computational environments. Secure temper responsive physical package.

366 views • 14 slides

Semi-Secure Semi-Secure where a hash is a secure one-way function. A cookie is a bit of state

One-Slide Summary Users often authenticate themselves by providing passwords. We store and compare hashes of passwords, Semi-Secure Semi-Secure where a hash is a secure one-way function. A cookie is a bit of state associated with a webpage

103 views • 9 slides

Defeating Secure Boot with EMFI Ang Cui, PhD & Rick Housley {a|r}@redballoonsecurity.com

Defeating Secure Boot with EMFI Ang Cui, PhD & Rick Housley {a|r}@redballoonsecurity.com PROJECT 1. Open-source project to democratize EMFI research 2. 2 years of work so far PROJECT Disclaimer: BadFET-style EMFI research is

1.55k views • 126 slides

SECURE HOME GATEWAY PROJECT ICANN63 BARCELONA OCTOBER 22, 2018 Jacques Latour, CTO, CIRA Labs

SECURE HOME GATEWAY PROJECT ICANN63 BARCELONA OCTOBER 22, 2018 Jacques Latour, CTO, CIRA Labs Canadian Internet Registration Authority Jacques.Latour [@] cira.ca Today's home network and IoT products and solutions lack secure testing and

696 views • 24 slides

Security Framework for the IPv6 Era SUZUKI, Shinsuke (Hitachi, Ltd. / KAME Project / WIDE Project

Security Framework for the IPv6 Era SUZUKI, Shinsuke (Hitachi, Ltd. / KAME Project / WIDE Project Secure-6 WG) suz@crl.hitachi.co.jp / suz@kame.net HIROMI, Ruri (Intec NetCore, Inc. / WIDE Project Secure-6 WG) hiromi@inetcore.com Apricot2005,

628 views • 18 slides

THE SECURE PROJECT: SOME RESULTS COMING FROM THE RESEARCH OF SCIENCE CURRICULA AND TEACHERS

THE SECURE PROJECT: SOME RESULTS COMING FROM THE RESEARCH OF SCIENCE CURRICULA AND TEACHERS AND LEARNERS OPINIONS ON SCIENCE EDUCATION . Job de Meyere (1) , Dagmara Sokolowska (2) , Elvira Folmer (3) , Barbara Rovsek (4) , Wim Peeters (5)

671 views • 44 slides

NISTs Industrial Control System (ICS) Security Project Presented at the: Secure Manufacturing

NISTs Industrial Control System (ICS) Security Project Presented at the: Secure Manufacturing in the Age of Globalization Workshop November 28, 2007 Stuart Katzke and Keith Stouffer National Institute of Standards and Technology

767 views • 40 slides

Secure Returns SAFE AS A VAULT Secure SECONDS TO UPLOAD Efficient ACCESSIBLE ANYWHERE

Secure Returns SAFE AS A VAULT Secure SECONDS TO UPLOAD Efficient ACCESSIBLE ANYWHERE Convenient What is Secure Returns ? Secure Returns is a secure website where you and your clients can securely upload & download confidential

202 views • 9 slides

Project Things A secure gateway to connect your things to Internet February 2, 2019

Project Things A secure gateway to connect your things to Internet February 2, 2019 <https://fosdem.org/2019/schedule/event/project_things> Speakers Dipesh Monga @ Mozilla Techspeakers Philippe Coval @ Samsung OpenSource 2 The hidden

558 views • 28 slides

Structuring for Business Agility Phil Abernathy BA conference Purple candor Sydney 24-Sep-18

Structuring for Business Agility Phil Abernathy BA conference Purple candor Sydney 24-Sep-18 Structure The Org Style The Work Business Agility Design Lean Agile Thinking Scrum Kanban XP Customer Journeys Centered DevOps

882 views • 41 slides

Investor & Analyst Conference David Rowland Chief Financial O ffj cer Forward-looking

Investor & Analyst Conference David Rowland Chief Financial O ffj cer Forward-looking Statements Except for the historical information and discussions contained herein, statements contained in this presentation may constitute forward-looking

142 views • 12 slides

Build a Profitable Business Workshop Tell us about you and your business 1) Your name

inspire, educate, equip entrepreneurs to build profitable businesses Build a Profitable Business Workshop Tell us about you and your business 1) Your name 2)Business name 3)Business stage (idea, early, growth, late) 4)What product (do/will)

571 views • 23 slides

transfers on farm profitability Ervin Prifti WIDER Development Conference 11-13 September 2019,

TITLE Heterogeneous impacts of cash transfers on farm profitability Ervin Prifti WIDER Development Conference 11-13 September 2019, Bangkok, Thailand Smallholder farming, poverty and markets No or little Limited Low access to modern

534 views • 16 slides

FY2017 AGM 27 July 2017 CORPORATE OVERVIEW MILESTONES 3 VERTICAL INTEGRATION ONE-STOP

FY2017 AGM 27 July 2017 CORPORATE OVERVIEW MILESTONES 3 VERTICAL INTEGRATION ONE-STOP FOOD & CATERING SOLUTION FOOD FOOD FOOD SUPPLIES & OTHER CATERING RETAIL MANUFACTURING TRADING BUSINESSES 4 VERTICAL INTEGRATION

513 views • 27 slides

CS 473: Algorithms Chandra Chekuri Ruta Mehta University of Illinois, Urbana-Champaign Fall

CS 473: Algorithms Chandra Chekuri Ruta Mehta University of Illinois, Urbana-Champaign Fall 2016 Chandra & Ruta (UIUC) CS473 1 Fall 2016 1 / 43 CS 473: Algorithms, Fall 2016 Introduction to Linear Programming Lecture 18 October 26,

865 views • 85 slides

Using Data to Scale & Grow Your Business Sponsored by Presented by Kiran Penaka & Anne

Using Data to Scale & Grow Your Business Sponsored by Presented by Kiran Penaka & Anne Hunt Todays Speakers Anne Hunt Kiran Penaka Director of Data and Analytics, Product Manager for Analytics, Viewpoint Viewpoint Poll Question

412 views • 20 slides

4Q FPE 2019 Results Overview 28 February 2019 26 November 2018 OVERVIEW OF Q4 RESULTS 1. The

4Q FPE 2019 Results Overview 28 February 2019 26 November 2018 OVERVIEW OF Q4 RESULTS 1. The Group has changed the financial reporting period to end on 30 June. This will be effective for the 18 months period from 1 January 2018 to 30 June

480 views • 16 slides