Web Application Security

Developing and operating secure web applications is an ongoing process.

Andreas Sperber

Published on 01.01.2018 published.

Five good resolutions for secure IT systems in 2018

At the latest after a serious hacking incident, everyone becomes active. To prevent this from happening, aramido presents five security measures for web applications. (read more)

Apache Backup • Data Security Click-Jacking Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Data Theft DDoS Defacement Hardening HTTP Strict Transport Security (HSTS) Incident Response Joomla Man-In-The-Middle (MIM) Secure Coding SQL Injections SSL-Stripping Web Application Zero-Day-Exploits

Andreas Sperber

Published on 15.12.2016 published.

Live-Hacking a Symfony application

Andreas Sperber from aramido is a guest at SensioLabs in Cologne on Dec 21, 2016. He hacks a Symfony app and shows what can be done for IT security. (read more)

Cross Site Scripting (XSS) DDoS Defacement Live Hacking PHP Secure Coding Shopware SQL Injections SSL-Stripping Event Web Application

Armin Harbrecht

Published on 19.10.2016 published.

HTTPS on the Rise - Why everyone must switch their site to HTTPS in 2017

Encrypted communication via HTTPS was long only for highly secure web applications. Soon, however, Google will penalize unencrypted websites. (read more)

Apache Man-In-The-Middle (MIM) nginx Public Key Infrastructure (PKI) SSL-Stripping Encryption Webserver X.509

Armin Harbrecht

Published on 15.04.2016 published.

Piwik Security – Securely Analyzing Web Applications

The aramido best practice for Piwik shows what to look out for when using the web analytics tool. The Piwik security checklist helps you secure your Piwik installation. (read more)

Apache Best Practice Guide Checklist • Cheat Sheet Hardening Piwik Web Analytics