Loading…
This event has ended. Visit the official site or create your own event on Sched.
Get your ticket and additional info and support at jcon.one
Back To Schedule
Wednesday, October 6 • 13:00 - 14:00
The Hacker's Guide to JWT Security

Log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
JSON Web Token (JWT) is an open standard for creating tokens that assert some number of claims like a logged in user and his/her roles. JWT is widely used in modern applications as a stateless authentication mechanism. Therefore, it is important to understand JWT security risks, especially when broken authentication is among the most prominent security vulnerabilities according to the OWASP Top 10 list. This talk guides you through various security risks of JWT, including confidentiality problems, vulnerabilities in algorithms and libraries, token cracking, token sidejacking, and more. In live demos, you’ll learn how to hijack a user account exploiting common security vulnerabilities on the client-side, on the server-side, and in transport. You’ll also find out about common mistakes and vulnerabilities along with the best practices related to the implementation of JWT authentication and the usage of available JWT libraries.

Speakers
avatar for Patrycja Wegrzynowicz

Patrycja Wegrzynowicz

CTO, Yon Labs
Patrycja Wegrzynowicz is a software visionary and expert specialized in automated software engineering, security, and Java technologies. She is the founder and CTO of Yon Labs, a start-up focused on detection and refactoring of software defects, including security vulnerabilities... Read More →


Wednesday October 6, 2021 13:00 - 14:00 CEST
#1 Main EN only