Talks·21 min
Falcon Darkstar Momot
Shows how Postgres roles, stored procedures and in-database JWT checks can limit what SQL injection is able to reach.
appsecvulnerabilitiesidentity+3
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 343 talks in the archive.
1–3 of 3 talks
Talks·21 min
Falcon Darkstar Momot
Shows how Postgres roles, stored procedures and in-database JWT checks can limit what SQL injection is able to reach.
Talks·21 min
Falcon Darkstar Momot
Reframes threat modeling around business assets and controls so developers can run it without rigid checklists.
Talks·21 min
Falcon Darkstar Momot
Argues that output encoding and structured intermediate representations work better than input sanitization for preventing injection attacks.