All’s Fair in Logs and War: The importance of application event logging

A presentation at DevSecOpsDays Austin 2019 in December 2019 in Austin, TX, USA by Laura Santamaria

Slide 1

https://cheatsheetseries.owasp.org/cheatsheets/Logging_Cheat_Sheet.html ALL’S FAIR IN LOGS AND WAR @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar The Importance of App Event Logging

Slide 2

APP EVENT LOGGING IS NECESSARY. @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 3

OR IS IT? @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 4

BAD ACTORS WON’T STICK TO YOUR EXPECTATIONS… @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 5

… AND NEITHER WILL YOUR DEVELOPERS. @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 6

GO BEYOND SYSTEM LOGS @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 7

UNDERSTAND HOW APPS FAIL. @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 8

FIND YOUR BACK DOORS BEFORE THEY DO. Photo by Matthew Henry on Unsplash @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 9

HOW? @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 10

SET UP PROCESS ALERTS Photo by Hugo Jehanne on Unsplash @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 11

DEFINE NO KNOWN USERS @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 12

SEPARATE CONCERNS @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 13

FORCE ARCHIVES Photo by Ula Kuźma on Unsplash @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 14

MASK OR SANITIZE PII @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 15

USE STANDARD LOGGING LIBRARIES @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 16

USE MORE LOG LEVELS @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 17

OH, AND BY THE WAY… @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 18

…ACTUALLY CHECK YOUR LOGS @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 19

SO PLEASE @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar

Slide 20

MAKE LOGS NOT WAR @nimbinatus | #DevSecOpsDaysAustin @nimbinatus | #LogsAndWar (Thanks)