LocoMocoSec 2024议题：A Recipe for Scaling (Web) Security（Lukas Weichselbaum）

Menu

Appetizer:
The (Google) Web Security Challenge

Main:
Addressing Root Causes
Safe Coding
Fixing Legacy Applications

Dessert:
Key Takeaways

Google makes heavy use of the web platform
Google has one of the largest web ecosystems
Many highly sensitive web applications

>600  *.google.com Subdomains
>900  Sensitive User-Facing  Web Applications  
>1 Trillion Requests