rubyaustralia/rubyconfau-2014-cfp — pull request #65 by NealKemp (2013-10-31 02:09:56+00:00)
Title: Security Engineering in Ruby

Believe it or not, proper application security isn't just for banks or the NSA. Recent high-profile attacks have cost web companies millions of dollars and thousands of users. These attacks beg the question, how should you protect your business and customers? You are probably salting your hashes and encrypting your traffic already, but there are much more fundamental elements of Ruby application security that you should employ throughout the development process.

Rather than dive into specifics like what-is-ssl or what-is-the-most-secure-hash-function, I will cover the most important tenets of security engineering such as educating your team, identifying attack surfaces, and utilizing the principle of least privilege--just to name a few. After explaining why a tenet is vital, I will show you how to apply it to your Ruby development processes.