DrupalTour. Khmelnytskyi — Why Drupal? (Andrij Sakhaniuk, InternetDevels)

•Download as PPTX, PDF•

0 likes•460 views

This document discusses some of the key benefits of using the Drupal content management system, including its security features, extensive add-ons for functionality like search and e-commerce, robust APIs for developers, and risk mitigation through a large community that helps ensure stability. While Drupal has a learning curve, it is widely used for around 3% of websites globally.

Technology

Why Drupal ?
Andrij Sakhaniuk aka nnevill

Security
- unvalidated input
- insecure communications
- insecure cryptographic storage
- broken authentication
- information leakage
- cross-site request forgery
- malicious file executions
- injection flaws
- cross-site scripting
- etc ...

Easy for site buidlers
Views
Panels
Panelizer
Display Suite
Context
etc ...

Search capabilities
Search api
Database search
Apache Solr
Search
Location
Gmap
Openlayers
Facet API
etc ...

Drupal APIForms API
AJAX framework
Batch API
Queue API
Render API
Entity API
Database API
States
Views API
Ctools API
Feeds API
Migrate API
etc...

Risk mitigation
- proven technology choices
- stable architecture
- thousands of free testers
- integration with test
frameworks
- security
- etc ...
~3% sites
in the world
build with
Drupal

DrupalTour. Khmelnytskyi — Why Drupal? (Andrij Sakhaniuk, InternetDevels)

Slides from my talk at ServerlessConf NYC 2017. The talk will cover the various aspects of reducing the attack surface on serverless applications with an emphasis on maintaining least privileged access. I’ll cover the possible ways for attackers to leverage an overly permissive application and what might be the impacts of such attempts. In the talk, I’ll present a demo of an open source tool which can help you maintain least privileged roles and policies for your Lambda functions and reduce the overall attack surface on your serverless application.

Automating your AWS Security Operations

Amazon Web Services

You automated your deployment, elasticized your workloads, and dynamically provisioned your fleet. What do you do next? Tackle automating your security needs using the latest capabilities in the cloud! There’s no single path to building an automated and continuous security architecture that works for every organization, but certain key principles and techniques are used by the early adopter cloud elite that give them distinct advantages. It's time to re-think your organization’s processes and behaviors to demonstrate the latest efficiencies in your security operations. In this webinar, learn how Intuit implements cloud security automation with Evident.io and other innovative cloud technologies. Join us to learn: • How security will be integrated into the overall processes of development and deployment. • How to tie security acceptance tests, a subset of your key security controls, right into the end of your functional testing process to promote builds with confidence at greater speed. • How to be successful with API-enabled, continuous security tools in the cloud. • How to operationalize security alarms, enabling world-class incident response and remediation capabilities.

Application Security Workshop

Priyanka Aash

Apache Kafka as Event Streaming Platform for Microservice Architectures

Kai Wähner

This session introduces Apache Kafka, an event-driven open source streaming platform. Apache Kafka goes far beyond scalable, high volume messaging. In addition, you can leverage Kafka Connect for integration and the Kafka Streams API for building lightweight stream processing microservices in autonomous teams. The Confluent Platform adds further components such as a Schema Registry, REST Proxy, KSQL, Clients for different programming languages and Connectors for different technologies. The session discusses how tech giants like LinkedIn, Ebay or Airbnb leverage Apache Kafka as event streaming platform to solve various different business problems and how to create a scalable, flexible microservice architecture. A live demo shows how you can easily process and analyze streams of events using Apache Kafka and KSQL.

Automating your AWS Security Operations

Evident.io

You automated your deployment, elasticized your workloads, and dynamically provisioned your fleet. What do you do next? Tackle automating your security needs using the latest capabilities in the cloud! There’s no single path to building an automated and continuous security architecture that works for every organization, but certain key principles and techniques are used by the early adopter cloud elite that give them distinct advantages. It's time to re-think your organization’s processes and behaviors to demonstrate the latest efficiencies in your security operations. In this webinar, learn how Intuit implements cloud security automation with Evident.io and other innovative cloud technologies. This slide deck covers: - How security will be integrated into the overall processes of development and deployment. - How to tie security acceptance tests, a subset of your key security controls, right into the end of your functional testing process to promote builds with confidence at greater speed. - How to be successful with API-enabled, continuous security tools in the cloud. - How to operationalize security alarms, enabling world-class incident response and remediation capabilities.

Planning A Web Application

ahmad bassiouny

Getting Started with Splunk Enterprise

Splunk

Role of cloud and analytics in IoT

Selvaraj Kesavan

Continuous Automated Red Teaming (CART) - Bikash Barai

AllanGray11

AWS Summit Berlin 2013 - Next-Generation Websites on Demand – with Infopark C...

AWS Germany

The demands regarding websites are rising drastically. Modern websites are becoming applications, integrating content and functions. Infopark Cloud Express is a PaaS offering for running WebCMS- and CRM-backed Web-Sites. It allowes Ruby on Rails Developers to create application-driven, scalable personalized Web-Sites without worrying about infrastructure.If you are building Web-Sites using Ruby on Rails on AWS, this talk is for you. Speaker:Thomas Witt, Director Product & Business Development, Infopark AG.

Cloud Breach – Preparation and Response

Priyanka Aash

Your next breach or insider attack will most likely have you digging for evidence in the cloud. Are you prepared? The old styles of imaging disks and tapping networks won't work! It won’t scale! This session will discuss response scenarios for cloud-enabled and cloud-dependent enterprises, a model for preparing for cloud response, and will show examples of cloud breach investigations. (Source: RSA USA 2016-San Francisco)

Cloud Breach – Preparation and Response

Priyanka Aash

Providing a Holistic, Service-Oriented Infrastructure for Integration of Real...

mfrancis

Apidays Paris 2023 - API Security Challenges for Cloud-native Software Archit...

apidays

Apidays Paris 2023 - Software and APIs for Smart, Sustainable and Sovereign Societies December 6, 7 & 8, 2023 API Security Challenges for Cloud-native Software Architects Pierre Versali, Cloud-native Software Architect | Principal Consultant at Devoteam ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Architecting extremelylarge scale web applications

Prashanth Panduranga

Engineering Data Pipeline for Data-Driven Analytics

Adetimehin Oluwasegun Matthew

5. Microsoft CloudCamp Las Vegas 2009 05 18

Intel Corporation

AWS Serverless API Management - Meetup

Samuel Vandecasteele

Blueprint Series: Expedia Partner Solutions, Data Platform

Matt Stubbs

Join Anselmo for an engaging overview of the new end-to-end data architecture at Expedia Group, taking a journey through cloud and on-prem data lakes, real-time and batch processes and streamlined access for data producers and consumers. Find out how the new architecture unifies a complex mix of data sources and feeds the data science development cycle. Expedia might appear to be a market-leading travel company – in reality, it’s a highly successful technology and data science company.

DrupalTour. Lviv — Bumpy road of Drupal7 (Pavel Shevchuk, EPAM)

Drupaltour

DrupalTour Lviv — Theming in Drupal8 (Ivan Tibezh, InternetDevels)Drupaltour

Similar to DrupalTour. Khmelnytskyi — Why Drupal? (Andrij Sakhaniuk, InternetDevels)

AppSec 2007 - .NET Web Services HackingShreeraj Shah

Serverless - minimizing the attack surface

Avi Shulman

Automating your AWS Security Operations

Amazon Web Services

Application Security Workshop

Priyanka Aash

Apache Kafka as Event Streaming Platform for Microservice Architectures

Kai Wähner

Automating your AWS Security Operations

Evident.io

You automated your deployment, elasticized your workloads, and dynamically provisioned your fleet. What do you do next? Tackle automating your security needs using the latest capabilities in the cloud! There’s no single path to building an automated and continuous security architecture that works for every organization, but certain key principles and techniques are used by the early adopter cloud elite that give them distinct advantages. It's time to re-think your organization’s processes and behaviors to demonstrate the latest efficiencies in your security operations. In this webinar, learn how Intuit implements cloud security automation with Evident.io and other innovative cloud technologies. This slide deck covers: - How security will be integrated into the overall processes of development and deployment. - How to tie security acceptance tests, a subset of your key security controls, right into the end of your functional testing process to promote builds with confidence at greater speed. - How to be successful with API-enabled, continuous security tools in the cloud. - How to operationalize security alarms, enabling world-class incident response and remediation capabilities.

Planning A Web Application

ahmad bassiouny

Getting Started with Splunk Enterprise

Splunk

Role of cloud and analytics in IoT

Selvaraj Kesavan

Continuous Automated Red Teaming (CART) - Bikash Barai

AllanGray11

AWS Summit Berlin 2013 - Next-Generation Websites on Demand – with Infopark C...

AWS Germany

Cloud Breach – Preparation and Response

Priyanka Aash

Cloud Breach – Preparation and Response

Priyanka Aash

Providing a Holistic, Service-Oriented Infrastructure for Integration of Real...

mfrancis

Apidays Paris 2023 - API Security Challenges for Cloud-native Software Archit...

apidays

Architecting extremelylarge scale web applications

Prashanth Panduranga

Engineering Data Pipeline for Data-Driven Analytics

Adetimehin Oluwasegun Matthew

5. Microsoft CloudCamp Las Vegas 2009 05 18

Intel Corporation

AWS Serverless API Management - Meetup

Samuel Vandecasteele

Blueprint Series: Expedia Partner Solutions, Data Platform

Matt Stubbs

Similar to DrupalTour. Khmelnytskyi — Why Drupal? (Andrij Sakhaniuk, InternetDevels) (20)

AppSec 2007 - .NET Web Services Hacking

Serverless - minimizing the attack surface

Automating your AWS Security Operations

Application Security Workshop

Apache Kafka as Event Streaming Platform for Microservice Architectures

Automating your AWS Security Operations

Planning A Web Application

Getting Started with Splunk Enterprise

Role of cloud and analytics in IoT

Continuous Automated Red Teaming (CART) - Bikash Barai

AWS Summit Berlin 2013 - Next-Generation Websites on Demand – with Infopark C...

Cloud Breach – Preparation and Response

Providing a Holistic, Service-Oriented Infrastructure for Integration of Real...

Apidays Paris 2023 - API Security Challenges for Cloud-native Software Archit...

Architecting extremelylarge scale web applications

Engineering Data Pipeline for Data-Driven Analytics

5. Microsoft CloudCamp Las Vegas 2009 05 18

AWS Serverless API Management - Meetup

Blueprint Series: Expedia Partner Solutions, Data Platform

More from Drupaltour

DrupalTour. Lviv — Bumpy road of Drupal7 (Pavel Shevchuk, EPAM)

Drupaltour

DrupalTour Lviv — Theming in Drupal8 (Ivan Tibezh, InternetDevels)Drupaltour

DrupalTour. Lviv — Apache solr. Advanced use cases (Artem Sylchuk, InternetDe...

Drupaltour

DrupalTour. Rivne — SEO & Usability (Roman Demydyuk and Oleg Shykhalov, Inter...

Drupaltour

DrupalTour. Rivne — Drupal 8 (Ivan Tibezh, InternetDevels)

Drupaltour

DrupalTour. Zhytomyr — Entity API in Drupal 7 (Ivan Tibezh, InternetDevels)

Drupaltour

DrupalTour. Zhytomyr — Створення інтернет-магазину на базі Drupal (Sergiy Skr...

Drupaltour

DrupalTour. Zhytomyr — Drupal Optimization (Dmitry Kinakh, InternetDevels)

Drupaltour

DrupalTour. Khmelnytskyi — Ember (Timur Bolotyuh, stfalcon.com)

Drupaltour

DrupalTour.Chernivtsi — Як написати якісний модуль для Drupal 7 (Taras Tsuper...

Drupaltour

DrupalTour. Vinnytsia — Борьба с нагрузкой на MySQL (Andrey Leshchuk, LetyShops)

Drupaltour

DrupalTour. Ternopil — What's going on when you visit an URL (Andrij Sakhaniu...

Drupaltour

DrupalTour. Chernivtsi — Think different або кUxня cучасного веб дизайну (Pa...

Drupaltour

DrupalTour. Vinnytsia — SASS and Drupal themes (Olexander Kuzava, InternetDev...

Drupaltour

DrupalTour. Khmelnytskyi — Про блог сайти (Olexander Kuzava, InternetDevels)

Drupaltour

DrupalTour. Ternopil — Drupal shell or just Drush (Serhii Puchkovskii, Intern...

Drupaltour

DrupalTour. Chernivtsi — Composer (Sergiy Skripchuk, InternetDevels)

Drupaltour

Composer is an application-level dependency manager for the PHP programming language that provides a standard format for managing dependencies of PHP software and required libraries. Composer - це пакетний менеджер рівня додатків для мови програмування PHP, який надає засоби з управління залежностями в PHP-додатку.

DrupalTour. Chernivtsi — Як спростити життя Web-розробнику (Olexander Kuzava,...

Drupaltour

DrupalTour. Ivano-Frankivsk — Dark side of the Drupal (Artem Sylchuk, Interne...

Drupaltour

More from Drupaltour (19)

DrupalTour. Lviv — Bumpy road of Drupal7 (Pavel Shevchuk, EPAM)

DrupalTour Lviv — Theming in Drupal8 (Ivan Tibezh, InternetDevels)