Slideshare.net (beta)

 
Post to TwitterPost to Twitter
Post: 
Myspace Hi5 Friendster Xanga LiveJournal Facebook Blogger Tagged Typepad Freewebs BlackPlanet gigya icons

All comments

Add a comment on Slide 1

If you have a SlideShare account, login to comment; else you can comment as a guest


Showing 1-50 of 7 (more)

CSRF_RSA_2008_Jeremiah_Grossman

From guestdb261a, 6 months ago

3770 views  |  0 comments  |  7 favorites  |  184 downloads  |  1 embed (Stats)
 

Categories

Add Category
 
 

Groups / Events

 

 
Embed
options

More Info

This slideshow is Public
Total Views: 3770
on Slideshare: 3769
from embeds: 1

Slideshow transcript

Slide 1:Cross-Site Request Forgery “The Sleeping Giant of Website Vulnerabilities” Jeremiah Grossman | WhiteHat Security | 04/09/08 | Session Code: HT1-20304

Slide 2:Jeremiah Grossman – WhiteHat Security Founder & CTO – Technology R&D and industry evangelist (Named to InfoWorld's CTO Top 25 for 2007) – Frequent international conference speaker – Co-founder of the Web Application Security Consortium – Co-author: Cross-Site Scripting Attacks – Former Yahoo! information security officer

Slide 3:Focus on “custom web applications” Vulnerability Stack WhiteHat Security “well-known” vulnerabilities Symantec Qualys Nessus nCircle

Slide 4:Target #1 – 162 million websites – 809,000+ websites with SSL-certificates – Many are mission-critical and gateways to highly sensitive customer and corporate information – These websites