Hack Yourself First

How to go on the offence before online attackers do

Troy Hunt
troyhunt.com
@troyhunt
 About the course

 This course is for web developers

 You’re going to be seeing a familiar environment with familiar tools
 It doesn’t matter what your favourite web stack is, this course is for
everyone
 Why hack yourself first?

 Developers need to hone cyber-offence skills

 If you can’t think like a hacker, it’s difficult to defend against them
 Hacking yourself first a method of easily assessing website security
without access to code
 Everything we’re going to look at is what can be remotely observed about a
website’s security position
 This approach allows us to explore the concept of defence in depth
 As we progress, we’ll fix multiple security flaws that would otherwise have
been single points of failure
 Understanding the relative cost of bug fixes

Requirements Design Code Test Production Breach

 Summary

 XXX