Making Security Approachable to Hapi Developers

[jlamendo]

One of the biggest frustrations I have with the current state of application security is the false divide between security professionals and developers. It bothers me that security professionals have become harsh critics of people working hard to create cool things, instead of a safety net to protect what they have built and the people that use it.

This problem has driven me to create security tools that are accessible to developers to bridge this divide and make security approachable and repeatable.

I will spend 10 minutes speaking about my modified version of Lout, and how it can be used to automatically generate context aware test cases for both good and malicious paths, alert developers to pitfalls like routes without authentication, and perform basic checks for things like timing attack vulnerabilities before code even gets deployed.

[nvcexploder]

👍 This is rad, @jlamendo. Looking forward to hearing it!