Securing the organization from cyber crimes cannot be done only by the perimeter defense. One of the most important knowledge is to understand the cyber criminal operations. This presentation explain about 2 common operations those can be found all over the internet and how to defense.
AnyID is the infrastructure of Thailand's National E-Payment Initiative. The presentation explains AnyID flows and information security implementation.
Securing the organization from cyber crimes cannot be done only by the perimeter defense. One of the most important knowledge is to understand the cyber criminal operations. This presentation explain about 2 common operations those can be found all over the internet and how to defense.
AnyID is the infrastructure of Thailand's National E-Payment Initiative. The presentation explains AnyID flows and information security implementation.
Logs from machines can tell security incidents but how can they be managed and analyzed properly. This presentation lays foundation of Big Data analytics using information security scenarios for example and also states the practical analytics from my experience.
This slide was presented in MiSSConf(SP1) June 18, 2016
Insecure Direct Object References occur when an application provides direct access to objects based on user-supplied input. As a result of this vulnerability attackers can bypass authorization and access resources in the system directly, for example database records or files.
This presentation explain how to discover this vulnerability in application, how to test and how to mitigate the risk.
I started working at Kiatnakin Bank PLC as Head of IT Security in 2014 and introduced secure software development to the firm. So I want to share my experience how my bank adopts secure software development successfully. I wish this could be the example to other organizations using to make secure software process for their own.
1. ff?uyttrflq
)
fr u: oooo(nso.)/ o nilsfl::rJfl'Fdrurunr:rirriufinsrrunr:
| 4 9t
- -
!, t
s?ur?laor.ru:sduqmnnu rnso9rfl{quu
| | 4 a Yl v
lj5sr1]Ufl1:5?t'tfiAofJrun4U:VffiJqvrnnU
drrinrrurJd'qdrrinurunigruunE
oaq
YlltilUlJ:gUlA flYllJ.oooroo
bd Enlnil Loddor
i I o o q/ e ! A y, v
t:0.1 n1:il:vqilnilsR:tlJRl:01u?un"r:n1nunonliln1:T?ur?raoryilrsduqflnnu
uavffor#rgudrJ:varunr:dasnr6ordururf,rJ:vauqiln6'u
AldaG
t:gu u"tull:nJfl?: ill{fl:
.l it 9 o
"
L t L o o e a I a ya et
fl{11fl{il'l9l?t o. dlllt'lfllfl.lll9l.ln{nilvn::ilO11{?Unl: Rlnil nnn1ilnl:U?UtffAOSU:VflUqnnRU
u L a, I a d ya v
uav0o9r{qJuurjI vfllu nl : u?ul?laoff u?uI4u: vdil qil nns
9r
teo.:ctiluuar:vn'r:il:uqilnotuR::runt:"tnY{fro/boddcn
iuyo e
-
t q i .i
etlilytrgtrfletflit'lufl'l:iuomnRu1u luvruvtt4o1ufrtilictli"]il:srmgriqilah?rj:vsrru'ldfr
a I dt o A q9 o o q a 6tr, r 4
n?]ilrgt09t50urlJu01u?urJ'lnrra&[Tt0[iln1:01u?ufl1: fl1nu flft9l'lufl'l:t14n?1ils?urilao
9t
-
& | 4 d v v t dt U | | d d
4il:eduqmnRUn'l:Tlu4n?lilrdufi]u01fld0]un1:ilqilnnun{fla1?[lJu[lJ0ul.1rJ:su1J:?9r[:?
v a4 tJl 9a o L o v v ai
urun;gilusrEir"tdilrirdrrirrinuronigruun?fibodo/lsrddorariufi bd Earnil lsrd&6r,
rY
4 | v o o v a r a Yt , v
-
J d1
[t0{ rrgt{gr{nfl{sfl::rJfl't:o1u?ufl1:nlnu fl9rgrlilnl:s?un4404il:eduqTnnurrne0qn{fluulj:vdlu
r4dy
flt:y?urilnorsu?rn4il:edilqmnri'uInufiigruusrSrJ:vdrtirfnurunigruue#(urudlvr^srdxdruo{rnu)
df | | hvv , J q Ydr -A
i r rr .
rljulj:srlun::rufll:.4 rra&mluto:ljfll:[r9r{91{t14t]Jufl::runl:(6Y{vlfY{u19r?uo)
q i I o o q a q9, | 4 9t 9
lunl:u 1J:v5lun::ilfl1:o'ru?ufll:frlnunnnlil n'r:tiln?1ils?utila0rJlJ:&cTUqmnnu
d 6f 9ld t J A .- 6t q q ai
r?run?:t14iln1:il:vqilnilvn:::Jfl'l:"1n:{vl allo&&a tu?u0uvr:Ylled qalnil lsr&d6r,t?01od.oo 1-1.
nrfi'onJ:vqildoo dnrTqvrnr:rirrfiu:Ligurnloruurunigilufl;ovr{rirrurJ:vqrrfioruorulurru
taqa I A I | . u It a a 4 | f +
j
f ,
-
rravrru?yn{ilg-riOnr:rirurufio{rJ:vauqmnfiu6?uqr'sil:vriitru?1:snr:il;vqruil:rnqnrrufrrfrrisilrdrulro
4dAslatgtto-A
fl{r:uuulrv{0tu:9rYt:]1JrrnslorY€uYllutfl1:?tJlJ:&sugrluft114u9r?ut?a1ttnud0lllvl
@rr)v
q{nnl?a?u0fllJouqilru]n
floildq{n?lilrildo
./7 }i
06_gJ -/_-_/_
_/
lurudr6iyqfir::lar1a)
9ov@4
rJ9r:?0: 15nr:cT'ruflulun:silu9l:
fl::il nt: ttavfrEi'lr.lrarrunr:
o o q a r A Yl v
nilv n: : iln'l: 01u?ufl1:fl1nunan1ilfl1:s?urilaor.r]J: sd1JomnRust
r.hurarrrgnr:'r
drfnn:ro:1uflr: Jm:llvr:au o ls lodlaabodo
6. :vriluil?1rvnrril:vqil
o o v A I 4 y, v
flilvn::ilfl 1:o'n{'tfJRl:n'tnunonlilR1:u?utfiaoflilsvduolrRRtgc
nYtfi o/bddcn
iufi'uyrdfibd qa1nilbddoo t?ol od.oo 1{.
lYa4voAv
tu ?lo{lJt3{lJ&oo nnu€yt1nl5 fl1t1{Uu:9il14
t I v El S raqa 0l 9l | 4 I | - v
nmf,n:Enj:qilurJfl:silueFrJolj?ruTrutnffrnilru'nnNuailflm:n4frTnJT'rrffiao4il:udtJqnnu
i j jr gtAr
?llyllo t:O.lyl1J:gt1illtO{?llJ:vqilm:1U
lr
4tAA
?'l5ctl lo t:O{l}lOYl5'lU
Lo.o rirdrdrrinurunfgilusr6frbraot",&.&.,,a.riufibd Earnilbdaor rdo.t
v
I v o o q q r 4 trl a
lt9t{st{frfltvfl: :lJfl'l: olu?uR'I5fl1flufl afl]il f.|1:ry?utfiaoruil: vfTUqmnRU tta&
v
v v dt r A d grt v
09l9r.1fluulJ: edl ufl1: ry?ut?ldotuu1u141J: vduqmnnu
lo.to : ru{1lJdCI1unt:niqvrnfr'uluftufisixl firil:vtnn
ts.or pram:rilfiwrum{?idlt}trufirfrtrrilotlunr:ud'hilruilqmnfru
?-li31l or
4Aa
t:oilty{0il11:flll
uu?yr1{rrauil1n: nr:1u1#nrrruqirutvrfiofrrJ:vauoYrnfr'u1u:suvt:'Iriru
I,
nr:fi'nfrrsurirj:varunr:rirurilfiot€u':urfr:J:vduomnfr'u{q
i A .e,r-
[5o{OU dl (CIlil)
4l
4t
?llvvl d
4{
?l:syl d