ApacheCon EU 2016

A product that works is not done, as there are many facets to consider - availability, scalability, security. Of those, security is probably the most expensive to get wrong.



By analysing a simple web application built on top of Apache Sling and its threat model, we will review the main attack vectors and how they can be mitigated. You will see what the general approaches are and also how Apache Sling allows you to eliminate entire classes of vulnerabilities by using secure-by-default components. Although we will use Apache Sling for examples, previous knowledge of Sling or its components is not required.