Advertisement
Kentico CMS 7 - Security improvements
Report
Thomas RobbinsFollow
Director of Marketing at PlayFab, Inc.Dec. 5, 2012•0 likes•1,406 views
0 likes
Be the first to like this
Show More
views
Total views
0
On Slideshare
0
From embeds
0
Number of embeds
0
Kentico CMS 7 - Security improvements
Dec. 5, 2012•0 likes•1,406 views
0 likes
Be the first to like this
Show More
views
Total views
0
On Slideshare
0
From embeds
0
Number of embeds
0
Download to read offline
Report
Technology
Kentico takes security seriously and security improvements are an important part of any new release. Password expiration and policy enforcement, are just a few of the new security improvements in Kentico CMS 7. in this interactive and demo filled session we looked at the new security improvements in Kentico CMS 7.
Thomas RobbinsFollow
Director of Marketing at PlayFab, Inc.Advertisement
Kentico CMS 7 - Security improvements
- Kentico CMS 7: Security improvements Dominik Pinter, dominikp@kentico.com
- Agenda • New features • New system protections • Improvements of existing features • Tips, hints, best practices
- Have you met Sean? • Sean, agent 00111 • Security expert at XYZ company
- Users accounts are in danger! Task #1: Sean, make user accounts as secure as possible - Passwords: password format, password policy, password expiration, forgotten passwords retrieval, password hash salt - Disabling autocomplete - Invalid logon attempts - Delete all testing users before production! - Emergency reset of Administrator password - CMSAdminEmergencyReset web.config key
- What about user sessions? Task #2: Sean, mitigate a risk that someone can steal user session. - Session attacks protection - Clickjacking protection - Screen lock
- Modules, modules, modules … Task #3: Sean, don‘t forget about the modules! - E-mail confirmation for subscription – Newsletters, Forums, Blogs, message boards - ASCX layouts protection - Reporting module protection - Web parts: Where, OrderBy
- Q&A
- Thank you http://www.kentico.com http://devnet.kentico.com dominikp@kentico.com
Advertisement