Knock Knock: Understanding Who is Using Your Web Applications • Aaron Bedra • GOTO 2013

This presentation was recorded at GOTO Aarhus 2013 http://gotocon.com Aaron Bedra - Application Security Lead, Braintree and Co-Author of Programming Clojure, 2nd Edition @AaronBedra ABSTRACT Knock, knock. Who's there? User. User who? [email protected]:password. Ok, have fun! There are lots of ways of dealing with authentication, but the interaction before, during, and after is usually ignored. This is pretty much how web applications work today. We don't ask the right questions of users attempting to access our web applications. How sure are you that the user accessing your site is who they say they are? How sure are you that you want them accessing your site at all? Join Aaron Bedra as he walks you through asking the questions you should be asking of your users, and how to help prevent abuse, fraud, and otherwise unwanted activity on your web applications. You will learn how to ask the right questions without interfering with a great user experience. https://twitter.com/gotocon https://www.facebook.com/GOTOConference http://gotocon.com