Web Application Security

VIDEO: 1 - 3 of 3

	A look at new SQL injection attacks SearchSecurity.co.UK | 18 Jun 2009 VIDEO - Lenny Zeltser, security consulting leader at Savvis Inc., explains how some are using SQL injection to actually embed new content, particularly HTML code.

	CISSP Essentials training: Domain 6, Application and System Development SearchSecurity.co.UK | 27 Mar 2009 VIDEO - In this CISSP Essentials video, Domain 6, Application and System Development, expert CISSP exam trainer Shon Harris details how applications and systems are structured.

	Inside a retail hack SearchSecurity.co.UK | 23 Jan 2009 VIDEO - Kevin Mandia of security consultancy Mandiant Corp. reviews an attack that is commonly used to swipe PIN numbers and compromise retailers: SQL injection.

	VIEW ALL VIDEO ON WEB APPLICATION SECURITY

NEWS: 1 - 3 of 315

	Adobe fixes critical Shockwave Flash Player flaw SearchSecurity.com | 25 Jun 2009 ARTICLE - Adobe released an update to its Shockwave Flash Player to repair a critical flaw that could allow an attacker to take complete control of a system.

	Cybercrime attacks, IT outsourcing, mobile malware top ISF threat list SearchSecurity.co.uk | 24 Jun 2009 ARTICLE - Crimeware, cloud computing and an erosion of network boundaries are just a few of the security threats that corporate members of the Information Security Forum fear the most.

	Buying botnets: Underground network marks ominous 'milestone' SearchSecurity.co.uk | 23 Jun 2009 ARTICLE - The Golden Cash network provides powerful malware toolkits to its members and pays them a bounty for every PC they can compromise.

	VIEW ALL NEWS ON WEB APPLICATION SECURITY

EXPERT TECHNICAL ADVICE: 1 - 3 of 115

WEB APPLICATION SECURITY EXPERTS
			Richard Brain Technical Director ASK A QUESTION

	Web application firewall's value depends on effort you put in Submitted By: SearchMidmarketSecurity.com | 24 Jun 2009 TIP - SMBs are buying Web application firewalls (WAF) for PCI DSS compliance, but if they are installed and forgotten, they won't be compliant or secure.

	How to prevent a cross-site tracing vulnerability exploit 21 May 2009 TIP - Michael Cobb provides quick tips on how to protect your websites from cross-site tracing attacks.

	How do attackers use Google to hack? 12 Jun 2009 EXPERT ANSWER - Richard Brain explains how to protect your website and Web servers from Google hacks.

	VIEW ALL EXPERT TECHNICAL ADVICE ON WEB APPLICATION SECURITY

REFERENCE & LEARNING: 1 - 3 of 22

	How to tackle buffer overflow vulnerabilities and attacks 21 Jun 2009 ROYAL HOLLOWAY EBOOK SERIES - Despite the research and learned papers on the subject, buffer overflow exploits seem to be as popular – and as successful – as ever

	Information Security magazine online 2009: Now available on demand 09 Apr 2009 INFORMATION SECURITY MAGAZINE ONLINE EDITION - Read all 2009 issues of Information Security magazine online.

	How valuable is security vulnerability research? Information Security magazine | 01 Aug 2008 FACE-OFF - Bruce Schneier and Marcus Ranum debate the ethics of vulnerability research.

	VIEW ALL REFERENCE & LEARNING ON WEB APPLICATION SECURITY

DOWNLOADS: 1 - 1 of 1

	The Art of Software Security Testing Published by: SearchSecurity.com | 11 Jun 2007 CHAPTER EXCERPT - In Chapter 11, "Local Fault Injection," the authors of "The Art of Software Security Testing" explain the proper methods for examining file formats.

	VIEW ALL DOWNLOADS ON WEB APPLICATION SECURITY

DEFINITIONS: 1 - 1 of 1

	Serious Organized Crime Agency 09 Jan 2008 WORD - The Serious Organized Crime Agency (SOCA) is a policing agency dedicated to the identification of criminal activity related to drug trafficking, money laundering, identity theft and immigration. SOCA is based in the United ...

	VIEW ALL DEFINITIONS ON WEB APPLICATION SECURITY

	SEE ALSO - Topics Related to Web Application Security:  Platform and OS Security Management, Security for Cloud Computing and Hosted Services, Virtualisation Technology Solutions and Strategy, Secure Coding and Application Programming, Database Security Tools and Techniques, Email and Instant Messaging Security, Enterprise Data Storage, Data Protection Solutions and Strategy