Website Vulnerabilities

Posted by Ben Griswold on Johnny Coder See other posts from Johnny Coder or by Ben Griswold
Published on Mon, 09 Nov 2009 22:51:00 +0000 Indexed on 2010/03/18 22:11 UTC
Read the original article Hit count: 820

Filed under:

Presentations

The folks at the Open Web Application Security Project publish a list of the top 10 vulnerabilities. In a recent CodeBrew I provided a quick overview of them all and spent a good amount of time focusing on the most prevalent vulnerability, Cross Site Scripting (XSS).

I gave an overview of XSS, stepped through a quick demo (sorry vulnerable site), reviewed the three XSS variations and talked a bit about how to protect one’s site.

References and reading materials were also included in the presentation and, look at that, they are provided here too.

Open Web Application Security Project
The OWASP Top Ten Vulnerabilities (pdf)
OWASP List of Vulnerabilities
The 56 Geeks Project by Scott Johnson
ha.ckers.org
OWASP XSS Prevention Cheat Sheet
Wikipedia
Is XSS Solvable?, Don Ankney
The Anatomy of Cross Site Scripting, Gavin Zuchlinski

Related posts about Presentations

How to create animated presentations/video-presentations?

as seen on Super User - Search for 'Super User'
Making presentation using PowerPoint is kind of too simple, it's possible to make nice presentations but I would like do a step forward. I'm wondering how people make animations like this one: http://www.facebook.com/video/video.php?v=10150210521510484 ? >>> More
Change Data Capture Webinar

as seen on SQLIS - Search for 'SQLIS'
I am going to be doing a webinar with our friends at Attunity on Change Data Capture. Attunity have a good story around this technology and you can use it in your SSIS loads to great effect. Join Attunity and Konesans/SQLIS for a Webinar on 17 September Space is limited. Reserve your… >>> More
Manchester UG Presentation Video

as seen on SQLIS - Search for 'SQLIS'
In July I was invited to speak at the UK SQL Server UG event in Manchester. I spoke about Excel being a good data mining client. I was a little rushed at the end as Chris Testa-ONeill told me I had only 5 minutes to go when I had only been talking for 10 minutes. Apparently I have… >>> More
Change Data Capture Webinar

as seen on SQLIS - Search for 'SQLIS'
I am going to be doing a webinar with our friends at Attunity on Change Data Capture. Attunity have a good story around this technology and you can use it in your SSIS loads to great effect. Join Attunity and Konesans/SQLIS for a Webinar on 17 September Space is limited. Reserve your… >>> More
Learn Lean Software Development and Kanban Systems

as seen on Johnny Coder - Search for 'Johnny Coder'
I did an in-house presentation on Lean Software Development (LSD) and Kanban Systems this week. Beyond what I had previously learned from various podcasts, I knew little about either topic prior to compiling my slide deck. In the process of building my presentation, I learned a ton. I found the… >>> More

Developer IT