Diving into DevSecOps w/ John Willis

DevSecOps is one of those buzzwords that can mean a lot of things or nothing at all. But where DevOps helped us gain a more holistic understanding of our delivery pipeline, DevSecOps does the same for our security efforts. Over the next two episodes of Dev Interrupted I explore what DevSecOps actually means to dev teams with John Willis.

Part 1



Top 9 Web Security Tools to Secure Your App/System

Security testing is used to identify the unapproved users within some information system and make the data secure. A conscientious and well carried out security testing can help the data to be secure and remain inaccessible to the malicious viruses and threats that might want to break through it. Below are the 9 web security tools that you can use to identify unauthorized invasions into your system.

1. Sucuri

Some of the features that this tool provides are remediation of security, deployment of protection platforms, identifying security issues, continued inspection configuration, a configuration of performance optimization, and many more.

How to Guard Against Mobile App Deep Link Abuse

Mobile app developers often use deep links to improve the user experience and engagement by helping users navigate from the web to their app. However, our security testing has found an easily exploitable vulnerability when deep links are used incorrectly for authorization purposes. This blog will explain how this vulnerability can be exploited and how to safeguard your app by using the more secure version of deep links, App Links.

Deep Links Overview

Deep links are URLs that take users directly to specific content in an app. They can be set up by adding a data specification (URI) inside an Intent Filter. Whenever a user clicks a URL (either in a webview, in an app, or in a web browser in general) that matches the URI specified inside the intent filter, she will be taken to the activity that handles it. Below is an example that shows how to add a deep link that points to your activity in the AndroidManifest.xml file: