security

Watch the session video here.

I'd like to present the case study at https://www.drupal.org/case-study/bunny-farm-framework-for-building-the…, detailing how I came up with the architecture, how it works, and why it would be useful.

The module and architecture encapsulates what I've learned over the years on how to create maintainable, fast and secure systems, supporting both decoupled (JSON) and normal Drupal output.

Watch the session video here.

Your website’s data is at risk, but knowing how to protect it can mean the difference between another day in the office and a data breach. By building in encryption from the beginning stages of your site, you will avoid headaches from having to bolt it on after the fact and have more tools at your disposal to keep your users secure.

As developers, we are capable of many amazing feats. We can create experiences that touch the lives of millions, brings aid to the corners of the world, empower new businesses and bring a voice to the voiceless. However with this capability, we must also take on the responsibility for the people, and data, we interact with.

Security is not a one-time activity that is performed and completed. A mature operation promotes continuous improvement in an ever evolving landscape of threats and mitigation techniques. Where does this leave us in the Drupal community? This presentation focuses on the tools and techniques for promoting security in practice related to Drupal, both the infrastructure and the application. We will explore the different user personas and targeted attacks that can be exploited within typical Drupal applications.

Content Security Policy is a new layer in web security to protect your site and your users from cross site scripting (XSS) vulnerabilities.  Additional strategies are also available to expand it's capabilities to detect and mitigate threats like malicious browser extensions, content injection from proxies, and unauthorized http requests.  Leveraging Drupal 8’s libraries system, the Content-Security-Policy module is being built to make this tool easily available to every Drupal site.

Google Search is the most-used search engine on the World Wide Web, handling more than three billion searches each day. In this session, you will learn how you can optimize your websites for users and to be compatible with Google search engine. You will learn how search works. You will be given tips on how to do well on search and explore tools that Google offers which you can use to manage your online presence on Google Search. This session is suitable for website or business owners as well as web developers who want to learn more about your website presence on Google organic search.