CSRF_RSA_2008_Jeremiah_Grossman

•

12 gostaram•2,097 visualizações

guestdb261a

Tecnologia

Cross-Site Request Forgery
“The Sleeping Giant of Website Vulnerabilities”
Jeremiah Grossman | WhiteHat Security | 04/09/08 | Session Code: HT1-20304

Jeremiah Grossman
– WhiteHat Security Founder CTO
– Technology R and industry evangelist
(Named to InfoWorld's CTO Top 25 for 2007)
– Frequent international conference speaker
– Co-founder of the Web Application
Security Consortium
– Co-author: Cross-Site Scripting Attacks
– Former Yahoo! information security officer

Focus on “custom web applications”
Vulnerability Stack
WhiteHat
Security

“well-known”
vulnerabilities
Symantec
Qualys
Nessus
nCircle

Recomendados

Top Ten Hacks of 2007Jeremiah Grossman

Citrix vs. ransomwareMarketingArrowECS_CZ

Propelling securityJayant Kumar

Norm Barber At-a-Glance 2015Norm Barber

OWASP ESAPI WAF AppSec DC 2009llamakong

Statistics - Top Website VulnerabilitiesJeremiah Grossman

Discovering the Value of Verifying Web Application Security Using IBM Rationa...Alan Kan

CSRF_RSA_2008_Jeremiah_Grossmanguestdb261a

The cyber house of horrors - securing the expanding attack surfaceJason Bloomberg

Palmer SymposiumEd Bellis

Cyber Security for Oil and Gas mariaidga

Solvay secure application layer v2015 sebaSebastien Deleersnyder

Beza belayneh information_warfare_briefBeza Belayneh

54 Chapter 1 • The Threat EnvironmentFIGURE 1-18 Cyberwar .docxalinainglis

Why Federal Systems are Immune from Ransomware...& other Grim Fairy Tales)BeyondTrust

Open Source Insight: Amazon Servers Exposed Open Source & the Public Sector...Black Duck by Synopsys

Future of Destructive MalwareGreg Foss

DNS Cybersecurity in 2012-2015Andrzej Bartosiewicz

Top Ten Web Hacking Techniques – 2008Jeremiah Grossman

Information Security: We are all InfoSec (updated for 2018)Michael Swinarski

Web security-–-everything-we-know-is-wrong-eoin-kearydrewz lin

THE SIGNIFICANCE OF CYBERSECURITY HilalHarris

Dissecting ssl threatsZscaler

Get Ready for Web Application Security TestingAlan Kan

Think Like a HackerNormShield, Inc.

Practical risk management for the multi cloudUlf Mattsson

Introduction to Software Security and Best PracticesMaxime ALAY-EDDINE

DSS ITSEC CONFERENCE - Lumension Security - Intelligent application whiteli...Andris Soroka

IAC 2024 - IA Fast Track to Search Focused AI SolutionsEnterprise Knowledge

Slack Application Development 101 Slidespraypatel2

Mais conteúdo relacionado

Semelhante a CSRF_RSA_2008_Jeremiah_Grossman

The cyber house of horrors - securing the expanding attack surfaceJason Bloomberg

Palmer SymposiumEd Bellis

Cyber Security for Oil and Gas mariaidga

Solvay secure application layer v2015 sebaSebastien Deleersnyder

Beza belayneh information_warfare_briefBeza Belayneh

54 Chapter 1 • The Threat EnvironmentFIGURE 1-18 Cyberwar .docxalinainglis

Why Federal Systems are Immune from Ransomware...& other Grim Fairy Tales)BeyondTrust

Open Source Insight: Amazon Servers Exposed Open Source & the Public Sector...Black Duck by Synopsys

Future of Destructive MalwareGreg Foss

DNS Cybersecurity in 2012-2015Andrzej Bartosiewicz

Top Ten Web Hacking Techniques – 2008Jeremiah Grossman

Information Security: We are all InfoSec (updated for 2018)Michael Swinarski

Web security-–-everything-we-know-is-wrong-eoin-kearydrewz lin

THE SIGNIFICANCE OF CYBERSECURITY HilalHarris

Dissecting ssl threatsZscaler

Get Ready for Web Application Security TestingAlan Kan

Think Like a HackerNormShield, Inc.

Practical risk management for the multi cloudUlf Mattsson

Introduction to Software Security and Best PracticesMaxime ALAY-EDDINE

DSS ITSEC CONFERENCE - Lumension Security - Intelligent application whiteli...Andris Soroka

Semelhante a CSRF_RSA_2008_Jeremiah_Grossman (20)

The cyber house of horrors - securing the expanding attack surface

Palmer Symposium

Cyber Security for Oil and Gas

Solvay secure application layer v2015 seba

Beza belayneh information_warfare_brief

54 Chapter 1 • The Threat EnvironmentFIGURE 1-18 Cyberwar .docx

Why Federal Systems are Immune from Ransomware...& other Grim Fairy Tales)

Open Source Insight: Amazon Servers Exposed Open Source & the Public Sector...

Future of Destructive Malware

DNS Cybersecurity in 2012-2015

Top Ten Web Hacking Techniques – 2008

Information Security: We are all InfoSec (updated for 2018)

Web security-–-everything-we-know-is-wrong-eoin-keary

THE SIGNIFICANCE OF CYBERSECURITY

Dissecting ssl threats

Get Ready for Web Application Security Testing

Think Like a Hacker

Practical risk management for the multi cloud

Introduction to Software Security and Best Practices

DSS ITSEC CONFERENCE - Lumension Security - Intelligent application whiteli...

Último

IAC 2024 - IA Fast Track to Search Focused AI SolutionsEnterprise Knowledge

Slack Application Development 101 Slidespraypatel2

Injustice - Developers Among Us (SciFiDevCon 2024)Allon Mureinik

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdfEnterprise Knowledge

SQL Database Design For Developers at php[tek] 2024Scott Keck-Warren

08448380779 Call Girls In Greater Kailash - I Women Seeking MenDelhi Call girls

Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...gurkirankumar98700

How to convert PDF to text with Nanonetsnaman860154

04-2024-HHUG-Sales-and-Marketing-Alignment.pptxHampshireHUG

Swan(sea) Song – personal research during my six years at Swansea ... and bey...Alan Dix

Enhancing Worker Digital Experience: A Hands-on Workshop for PartnersThousandEyes

Maximizing Board Effectiveness 2024 Webinar.pptxOnBoard

FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhisoniya singh

Google AI Hackathon: LLM based Evaluator for RAGSujit Pal

A Domino Admins Adventures (Engage 2024)Gabriella Davis

Data Cloud, More than a CDP by Matt RobisonAnna Loughnan Colquhoun

[2024]Digital Global Overview Report 2024 Meltwater.pdfhans926745

The Codex of Business Writing Software for Real-World Solutions 2.pptxMalak Abu Hammad

Scaling API-first – The story of a global engineering organizationRadu Cotescu

Boost PC performance: How more available memory can improve productivityPrincipled Technologies