By producing a popular RIA widget you can distribute your code to millions of users practically overnight. Most widgets are designed to gather data from the web and then present that data to the user. In order to enable this functionality, Google Gadgets for example support a rich programming model based on based on JavaScript and the Gadgets' API. Unfortunately, rich platforms tend to lead to programming errors and security issues. The users of a poorly written RIA widget can have their online accounts breached, web site passwords compromised, local computer data stolen, and even lose control of their computer. This presentation, via code snippets, flow diagrams, and other means, discusses how to write an RIA widget that avoids these pitfalls.

Register for AJAXWorld RIA Conference & Expo
Submit Your Paper to Present a Session
Sponsor AJAXWorld RIA Conference & Expo

Speaker Bio: Neil Smithline's main focus has been in optimizing the software life cycle from a product's initial concept through its retirement. This has included tools that affect development, programming techniques, software patterns, development processes, developer training, internal and external. For the past nine years he has directed these efforts almost exclusively to application security. He was the BEA Security Architect for over eight years. In this position Smithline co-designed the security framework for WebLogic Server that is now incorporated into most BEA products and becoming part of many Oracle products. During his tenure at BEA, he had the opportunity to interact with hundreds of customers; helping them develop their security architecture, processes, and strategies. He is currently providing security architecture consulting at OneStopAppSecurity.com.