Test-Driven Security

Every security vulnerability in your  application stems from a missing test. This presentation challenges the traditional separation between security and testing, demonstrating that comprehensive  test coverage is your most effective first line of defence against common security weaknesses.

Using the Common Weakness Enumeration (CWE) list, a comprehensive catalogue of software security flaws, as a reference, this presentation will explore the most critical weaknesses affecting  applications. These include SQL injection (CWE-89), cross-site scripting (CWE-79) and command injection (CWE-78), as well as other prevalent vulnerabilities. You will learn to recognise attack vectors and, most importantly, how to write  tests that would have prevented vulnerabilities from reaching production.