Description
Django is the most popular Python-based web framework used for creating web applications. The web applications are vulnerable for various reasons including a) configuration settings of the web applications, b) lack of implementation of security best practices and secure coding, and c) lack of awareness of secure first web applications among developers. The vulnerable web applications put the data of the customers at greater risk and the compromised code can lead to problems beyond control. It is very important to develop secure web applications to protect customer data and code to mitigate the risk.
In this talk, we will focus on two aspects. First, performing penetration testing on Django web applications to identify vulnerabilities and scanning for Open Web Application Security Project (OWASP) Top 10 risks. Second, strategies and configuration settings for making the source code and Django applications secure. We will also discuss the Djangohunter tool to identify incorrectly configured Django applications that are exposing sensitive information.
Outline
- Security aspects of Django web applications (03 minutes)
- Penetration testing of Django web applications (07 Minutes)
- Overview of OWASP Top 10 risks (10 Minutes)
- Djangohunter tool demonstration (06 Minutes)
- Strategies and configuration settings to make Django Application secure (10 Minutes)
- Conclusion and Questions (04 Minutes)
#PWC2022 attracted nearly 375 attendees from 36 countries and 21 time zones making it the biggest and best year yet. The highly engaging format featured 90 speakers, 6 tracks (including 80 talks and 4 tutorials) and took place virtually on March 21-25, 2022 on LoudSwarm by Six Feet Up.
More information about the conference can be found at: https://2022.pythonwebconf.com