The OWASP Foundation AppSec Research 2013 Amsterdam OWASP BeNeLux Candidacy AppSec Europe 2013.
AppSec And Microservices
-
Upload
sam-newman -
Category
Technology
-
view
3.563 -
download
0
Transcript of AppSec And Microservices
@samnewman
Accounts
Returns
Invoicing
Shipping
Inventory
Customer Service
Small Autonomous services that work together, modelled around
a business domain
@samnewman
Open Safe
Pick Lock Learn Combo Cut Open
Find Written Combo
Get Combo from the target
Blackmail Threaten Bribe
@samnewman
Open Safe
Pick Lock Learn Combo Cut Open
Find Written Combo
Get Combo from the target
Blackmail Threaten Bribe
Impossible
Impossible ImpossiblePossible
Possible
Possible
@samnewman
Catalog service
Music Web Shop
Recommend service
Royalty Payment Gateway
Mobile app
Web browsers
User service
@samnewman
Catalog service
Music Web Shop
Recommend service
Royalty Payment Gateway
Mobile app
Web browsers
User service
Transport Security
BENEFITS OF HTTPS?
▫︎ Server guarantees!
▫︎ Payload not manipulated…
▫︎…but no client guarantee and…
BENEFITS OF HTTPS?
▫︎ Server guarantees!
▫︎ Payload not manipulated…
▫︎…but no client guarantee and…
▫︎…certificates can be a pain
Catalog service
Music Web Shop
Recommend service
Royalty Payment Gateway
Mobile app
Web browsers
User service
@samnewman
Catalog service
Music Web Shop
Recommend service
Royalty Payment Gateway
Mobile app
Web browsers
User service
@samnewman
Catalog service
Music Web Shop
Recommend service
Royalty Payment Gateway
Mobile app
Web browsers
User service
Web browsers
Form AuthOAuth
@samnewman
Catalog service
Music Web Shop
Recommend service
Royalty Payment Gateway
Mobile app
Web browsers
User service
Web browsers
Form AuthOAuth
User service
@samnewman
Catalog service
Music Web Shop
Recommend service
Royalty Payment Gateway
Mobile app
Web browsers
User service
Web browsers
Form AuthOAuth
User service
@samnewman
Catalog service
Music Web Shop
Recommend service
Royalty Payment Gateway
Mobile app
Web browsers
User serviceUser
service
@samnewman
Catalog service
Music Web Shop
Recommend service
Royalty service
Mobile app
Web browsers
User service
@samnewman
Catalog service
Music Web Shop
Recommend service
Royalty service
Mobile app
Web browsers
User service
PERIMITER SECURITY!
@samnewman
Sam Newman
Building MicroservicesDESIGNING FINE-GRAINED SYSTEMS
http://buildingmicroservices.com/
@samnewman
Sam Newman
Building MicroservicesDESIGNING FINE-GRAINED SYSTEMS
http://buildingmicroservices.com/
http://samnewman.io/
@samnewman
Sam Newman
Building MicroservicesDESIGNING FINE-GRAINED SYSTEMS
http://buildingmicroservices.com/
http://magpietalkshow.com/
http://samnewman.io/