The work of Billy Hoffman, lead security researcher for SPI Dynamics, which was acquired by HP last year, has been featured in Wired, Make magazine, Slashdot, G4TechTV, and in various other journals and Web sites. Today though he is in full flow at the second AJAX Security Bootcamp, an all-day deep dive into Web application vulnerabilities being held on Day One of the 6th International AJAX World RIA Conference & Expo in San Jose, California.

Hoffman will give a review of traditional web security and explain the intracacies of Resource enumeration attacks in great detail, Injection attacks, and session hijacking as well as a step by step walk through of hacking an AJAX travel site.

The intensive, one-day, hands-on training program aims to teach Web developers, Web designers, and other Web professionals how to build secure Rich Internet Application and demonstrate what the best practices are to mitigate security problems in AJAX apps.