Trainers

Pragmatic Web Security

Schedule

07:30h
Enjoy the continental breakfast buffet together with the trainers

08:30h
Setting the baseline

• Why we still depend on credentials for authentication

• Common mistakes in authentication forms

10:30h
Break with coffees, teas, juices, fresh yoghurt and fruits

11:00h
Tracking authentication state

• The “cookies vs tokens” debate

• Session management in three properties

• Deciding the right approach for your application

12:30h
Lunch time: fresh soup, salads, selections of cold and warm fish and meat dishes, dessert

14:00h
Common vulnerabilities in an API world

• When does Cross-Site Request Forgery (CSRF) matter?

• Understanding Cross-Origin Resource Sharing (CORS)

• Common misconfigurations with CORS

• Practical steps to protect your application

15:30h
Break with coffees, teas, juices, energizers and snacks

16:00h
Advanced authentication mechanisms

• Multifactor authentication

• OAuth 2.0 and OpenID Connect

17:30h
End of workshop