Understanding the Top Web 2.0 Attack Vectors at AJAX World

The i-Technology Media!	Register \| Log in

.NET · AJAX · CLOUD · ECLIPSE · FLEX · OPEN WEB · iPHONE · JAVA · LINUX · OPEN SOURCE · ORACLE · PBDJ · SEARCH · SILVERLIGHT · SOA · VIRTUALIZATION · WEB 2.0 · WIRELESS · XML

Comments

Drool, Britannia? Is the UK Failing the Cloud?

By Roger Strukhoff

Richard Davies wrote: The UK has a good crop of technology pioneers in cloud computing - for example ElasticHosts, FlexiScale, Flexiant, OnApp - and also some strong government initiatives such as G-Cloud. We will have to see whether this kind of technical leadership converts into swift mass-market adoption or not.

Jan. 8, 2012 11:38 AM EST

read more & respond »

Cloud Expo on Google News

Did you read today's front page stories & breaking news?

Cloud Expo & Virtualization 2011 West

Keynotes

Oracle

Opening Keynote | An Enterprise Cloud for Business-Critical Applications

Abiquo

Day 2 Keynote | The Enterprise Cloud Tightrope - Balancing for Success

Akamai

Day 3 Keynote | The DNA of an Enterprise Cloud

DIAMOND SPONSOR:

Oracle

Many Clouds, Many Choices'Cloud

PLATINUM PLUS SPONSORS:

Abiquo

Enterprise Cloud Best Practices - Town Hall - Join the discussion…

PLATINUM SPONSORS:

Intel

Progressing Toward the Federated, Automated and Client-Aware Cloud

New Relic

How to build an app with Twitter-like throughput

Rackspace

Computing in the Cloud Era

GOLD SPONSORS:

Gale Technologies

Practical Cloud Migration

IBM

Re-think IT. Re-inventing Business.

Intel/McAfee

Identity Driven Security in the Cloud

PerspecSys

Hackers Hackers Everywhere, Is My Public Cloud That Safe?

Red Hat

Unlock the Value of the Cloud

SHI

Mission Critical Applications and the Cloud - Myth or Reality?

SoftLayer

Not Your Grandpa's Cloud

Terremark

Integrating Enterprise Clouds

VMware

Upgrade to a vCloud

POWER PANELS:

Cloud Expo Silicon Valley: CTO Power Panel

Cloud Expo Silicon Valley: CEO Power Panel

Cloud Expo Silicon Valley: Cloud SuperStars Panel

Cloud Expo Silicon Valley: CloudNOW Panel

Click For 2010 West
Event Webcasts

Cloud Expo & Virtualization 2011 East

DIAMOND SPONSOR:

Dell

Dell & VMware Deliver the Enterprise Hybrid Cloud

PLATINUM PLUS SPONSORS:

Abiquo

Are Financial Services Organizations Risking Security by Avoiding Cloud Computing?

Oracle

From Consolidation to Enterprise Private PaaS

PLATINUM SPONSORS:

Intel

Driving the Transformation to Next Generation Cloud Data Centers

Rackspace

The Inevitability of an Open Cloud

GOLD SPONSORS:

CA Technologies

Follow YOUR path to Cloud Computing

Interxion

Who Keeps the Cloud in the Air?

Microsoft

Patterns for Cloud Computing

PerspecSys

War in the Clouds: Are you ready?

ServiceMesh

The Big Win: Stop Playing Small-Ball with Your Cloud Strategy

Terremark

Evaluating Enterprise Clouds

Xiotech

Cloud Storage: Myths and Realities

POWER PANELS:

Cloud Expo New York: CTO Power Panel

Cloud Expo New York: CEO Power Panel

Cloud Expo New York: CMO Power Panel

Cloud Expo New York: Wrap-Up Power Panel

Click For 2010 West
Event Webcasts

Live Google News by SYS-CON!

Top Three Links You Must Click On

AJAXWorld News Desk

Understanding the Top Web 2.0 Attack Vectors at AJAX World

Danny Allan's RIA Session at AJAXWorld, March 18-20, in New York City

By: RIA News Desk

Mar. 5, 2008 04:00 PM

As more traditional sites adopt Web 2.0 technologies including AJAX, Web Services, SOA and PHP to perform online transactions one thing is certain--- these new technologies bring security issues and ignoring them could lead to serious breaches.

Watchfire will demonstrate and discuss the most common Web 2.0 attack vectors, analyze the specific security issues of AJAX, especially cross-site request forgery (CSRF) and cross-site scripting (CSS), and explain techniques for exploiting and protecting web services including secure coding practices and how to properly secure web applications.

Speaker Bio: Danny Allan is director of security research with Waltham-based Watchfire, a provider of software and services to help ensure the security and compliance of Websites. In 2000, he joined Watchfire bringing with him several years of business and technology-related experience including penetration testing and internal system remediation for one of Canada's biggest universities. In his role as security analyst, he is closely involved with enterprise global customer deployments, researching and evaluating technologies, and helping define and recommend strategic directions for Watchfire's security solutions. In his more than six years with Watchfire, Allan has held several critical customer-facing positions, including team lead, consulting services and sales engineer. He holds a Bachelor of Commerce with a major in information systems from Carleton University.

Register for AJAXWorld Conference & Expo
Submit Your Paper to Present a Session
Sponsor AJAXWorld Conference & Expo

2008 Will Be The Decision Year for RIAs
AJAXWorld Conference & Expo 2008 will provide delegates with the optimum balance between RIAs, Rich Web Technologies and AJAX, while underlining business needs, technology potential, and enhanced user experience.

This year at AJAXWorld the relentless focus is not only on where RIAs are now but also where Rich Web Technologies are headed, where Enterprise Web 2.0 and Social Applications are taking the software development industry and the end user, and how Rich Web Technologies are transforming our businesses and our lives.

Delegates will learn how RIAs are making money and gaining market-share for some of the leading businesses in the world.

The real-world questions that will be answered by this year's 140+ sessions are those that currently preoccupy working developers, architects, IT managers and business line managers. The 2008 tracks include:

Enterprise RIAs and AJAX
Rich-Web Case Studies and Mash-Ups
Enterprise Web 2.0 & Social Applications
Event-Driven Web
iPhone Developer Summit
Diamond Track

AJAXWorld is sponsored by the world’s leading RIA technology providers including.

Conference faculty includes the world’s top RIA experts.

About RIA News Desk
Ever since Google popularized a smarter, more responsive and interactive Web experience by using AJAX (Asynchronous JavaScript + XML) for its Google Maps & Gmail applications, SYS-CON's RIA News Desk has been covering every aspect of Rich Internet Applications and those creating and deploying them. If you have breaking RIA news, please send it to RIA@sys-con.com to share your product and company news coverage with AJAXWorld readers.

Reader Feedback: Page 1 of 1