Securing Java Applications with OWASP's Enterprise Security API

While most developers have heard the saying “build security in,” doing so typically requires each team to build and maintain its own repository of security mechanisms. Not only is this risky and ad hoc, it is also very inefficient and costly. OWASP’s Enterprise Security API is a free and open collection of security methods that can be easily used and reused.

The cost savings through reduced development time, and the increased security due to using heavily analyzed and carefully designed security methods provide developers with a massive advantage over organizations that are trying to deal with security using existing ad hoc secure coding techniques. This API is designed to automatically and transparently take care of many aspects of application security.

This talk will discuss the various ESAPI modules including functionality for:

• Authentication
• Encryption
• Validation
• Encoding
• Logging
• Intrusion detection

Read more about ESAPI on OWASP’s ESAPI wiki page.