SlideServe
Télécharger Obtenir Pro
Menu
Accueil Pro
Préférences
ApparenceLight Aide et commentaires
© SlideServe · v2026

Current Web Security Challenges in Latvia: Identity Theft, Code Quality, and Monitoring Gaps

sorcha avatar
sorcha
10 diapositives · 238 Views · Oct 21, 2014

This article delves into the pressing web security challenges faced in Latvia, focusing on identity theft, code quality, and the diminishing importance of network perimeter security. Key issues include ineffective authentication methods, insecure data storage, and the lack of dedicated security professionals. As consumerization trends rise, the security landscape evolves with growing risks from a variety of devices. This analysis offers insights into potential solutions, including improved training, secure coding practices, and centralized access control strategies to enhance web security resilience.

#current web security challenges in latvia: identity theft, code quality, and monitoring gaps #current web security challenges in latvia: identity theft, code quality, and monitoring gaps ppt #powerpoint #presentation
Current Web Security Challenges in Latvia: Identity Theft, Code Quality, and Monitoring Gaps - slide 1
01 / 10Current Web Security Challenges in Latvia: Identity Theft, Code Quality, and Monitoring Gaps
1 / 17

Télécharger la présentation

Current Web Security Challenges in Latvia: Identity Theft, Code Quality, and Monitoring Gaps
Une image / un lien ci-dessous est fourni (tel quel) pour télécharger la présentation

Politique de téléchargement : le contenu du site vous est fourni TEL QUEL pour votre information et votre usage personnel ; il ne peut être vendu, concédé sous licence ni partagé sur d’autres sites sans l’accord de son auteur.Le contenu vous est fourni TEL QUEL, pour votre information et votre usage personnel uniquement. Téléchargez la présentation en cliquant sur ce lien. Lors du téléchargement, si vous ne parvenez pas à télécharger une présentation, l’éditeur a peut-être supprimé le fichier de son serveur.Pendant le téléchargement, si vous ne parvenez pas à obtenir une présentation, le fichier a peut-être été supprimé par l’éditeur.

F I N

Plus de contenu associé

Transcription de la présentation

  1. Ēriks Dobelis, RTU RBS, BITI, eriks . dobelis @ biti . lv Current web security challenges in Latvia

  2. Contents • Identity theft • Code quality • Single layer of control • Lack of monitoring • Decreasing importance of perimeter • Impact of consumerisation and device specialization • Other long term trends

  3. Identity theft • Most popular authentication methods: • User/password • Code card • Code calculator • MobileID • Internetbank as authentication provider

  4. Identity theft (cont.) • Risks • Insecure storage (esp. password, code card) • Phishing • Solutions • More secure authentication methods • User education

  5. Code quality • Secure code development not part of typical curriculum • A lot of vulnerable code • Solutions • Training and education • Penetration testing • Architecture

  6. Single layer of control • Most web applications put 100% of security controls in code • Mistake by one developer may lead to huge impact • Solutions • Application level security proxy • Usage of frameworks

  7. Lack of monitoring • Most organizations cannot afford dedicated security professionals • Most IDS systems fail to identify large sets of attacks • Solutions • Application level security proxy • Regular log analysis

  8. Decreasing role of perimeter • False sense of security from firewall • Increasing number of business partners • Increased use of hosted applications • Solutions • Access control centralization • Security policy

  9. Impact of consumerisation and device specialization • Consumers using increasing range of devices to connect to web applications • Impossible to restrict browser versions and platforms • Browser vulnerabilities • Solutions • Platform independent standards based development

  10. Other long term trends • HTML5 new funcionality • WebSockets • Offline applications • Local data storage and access to files • Concurrency • Move to cloud • Increasing power of large vendors