Secure Session Management

We're facing an increasing need for privacy and security when communicating between not only individuals around the world, but between systems as well. It is imperative that we secure our systems against intruders from the outside, but we must also compartmentalize and protect our systems from the inside.

• How do we build and maintain secure sessions for our users?
• What do we need to keep in mind when designing our systems?
• Which industry standards can you as developers apply to to your code to contribute to a more secure environment?
• And perhaps most importantly, what are the common mistakes we should learn from and try to avoid in the future?