Kansas City November 2007 Meeting - Revision history

Bkmarshall at 15:47, 16 April 2008

2008-04-16T15:47:31Z

Bkmarshall at 15:27, 16 April 2008

2008-04-16T15:27:31Z

Bkmarshall: New page: Speaker: '''Tom Stripling, CISSP on The Dangers of Third-Party Content''' It is now commonplace for web applications to include content from other sites, partners, and advertisers. If th...

2008-04-16T15:02:26Z

New page: Speaker: '''Tom Stripling, CISSP on The Dangers of Third-Party Content''' It is now commonplace for web applications to include content from other sites, partners, and advertisers. If th...

New page

Speaker: '''Tom Stripling, CISSP on The Dangers of Third-Party Content'''

It is now commonplace for web applications to include content from other sites, partners, and advertisers. If this content isn’t handled correctly, applications are left vulnerable to attack. By examining a variety of attacks that can be executed through third-party content, we can better evaluate application risk and design countermeasures.

Session Learning Objectives
* Determine the threat posed by third-party content, given trends in Internet content and specific risks associated with each form of third-party content inclusion
* Demonstrate attacks against a live web application that exploit flawed security assumptions in the inclusion of third-party content
* Analyze the effectiveness of various application security countermeasures to combat the threat
* Enable developers and penetration testers to better identify and prevent the risks associated with the use of third-party content in web applications

Tom Stripling is a senior application security consultant with an extensive background in web application development, penetration testing, and risk assessment. In his role at Security PS, he helps clients uncover application vulnerabilities and secure the software development process. In his spare time, Tom is an avid researcher of application security attacks, vulnerabilities, and best practices.

← Older revision		Revision as of 15:47, 16 April 2008
Line 12:		Line 12:


−	'''Speaker 1: Tom Stripling, CISSP on The Dangers of Third-Party Content~~'''~~'''	+	'''Speaker 1: Tom Stripling, CISSP on The Dangers of Third-Party Content'''

	It is now commonplace for web applications to include content from other sites, partners, and advertisers. If this content isn’t handled correctly, applications are left vulnerable to attack. By examining a variety of attacks that can be executed through third-party content, we can better evaluate application risk and design countermeasures.		It is now commonplace for web applications to include content from other sites, partners, and advertisers. If this content isn’t handled correctly, applications are left vulnerable to attack. By examining a variety of attacks that can be executed through third-party content, we can better evaluate application risk and design countermeasures.

@@ Line 1: / Line 1: @@
-Speaker: '''Tom Stripling, CISSP on The Dangers of Third-Party Content'''
+The [[Kansas_City]] OWASP chapter met on November 7, 2007 at Centriq Training in Leawood, KS.
 It is now commonplace for web applications to include content from other sites, partners, and advertisers.  If this content isn’t handled correctly, applications are left vulnerable to attack.  By examining a variety of attacks that can be executed through third-party content, we can better evaluate application risk and design countermeasures.
@@ Line 10: / Line 23: @@
 Tom Stripling is a senior application security consultant with an extensive background in web application development, penetration testing, and risk assessment. In his role at Security PS, he helps clients uncover application vulnerabilities and secure the software development process. In his spare time, Tom is an avid researcher of application security attacks, vulnerabilities, and best practices.