The security landscape is changing dramatically from month to month. Unless you are aware of CSRF, Anti-DNS Pinning, Javascript highjacking, and the many ways to fool an XSS filter, it's likely that your Web application is not secure. Attackers used to concentrate on ActiveX, but now Javascript, CSS and even simple HTML elements have are used against Web sites.
In this session, we reveal:
- Security challenges particular to a Web 2.0 world;
- Details of CSRF, Anti-DNS Pinning, JavaScript hijacking, fooling an XSS filter and more;
- How you can protect yourself, from both the point of view of site owners and users.
This session was recorded at The Ajax Experience conference in Boston, Massachusetts, September 29 - October 1, 2008.
CIO Research Library