From the course: Programming Foundations: Secure Coding

Unlock the full course today

Join today to access over 24,800 courses taught by industry experts.

Configuration issues

Configuration issues

From the course: Programming Foundations: Secure Coding

Start my 1-month free trial Buy for my team

Configuration issues

“

- A somewhat common theme should be identified by this point. We find that in many cases the process that make running, deploying and troubleshooting an application much easier can also be used to exploit an application. Configuration of our application is another such case. So what is configuration? To SANS for instance, secure configurations apply to the systems and servers. It's the software and operating systems the machines are running on. It's definitely critical to keep systems patched. But from a development perspective, this isn't configuration. When I talk about securing your configuration, I'm referring to the feature flags, options, and other data elements that your application needs to run, but they can be optionally configured at startup or runtime. Many times as developers, we want to soft rollout of features through the use of feature flags, or provide ways to put the application into a higher state…

Contents