Category:OWASP AIR Security Project

Overview

OWASP AIR Security Project is an open project for sharing a knowledge base in order to raise awareness around the subject of AIR application security.

Goals

The OWASP AIR Security Project aims is to produce guidelines, references and tools around AIR Application Security.

Articles

[1] Introduction to the AIR Security Model An Adobe blog introducing the AIR security model at a high level.

[2] Digitally Signing Adobe AIR Applications An Adobe Developer Center article on how to sign and test AIR applications.

[3] Managing Adobe AIR updates with ColdFusion 8 An Adobe Developer Center article on how to push out updates to AIR applications.

[4] Remote Plugins and Modules in AIR An Adobe blog entry on how to load remote modules in AIR applications.

[5] Code Signing in Adobe AIR An in depth, Dr. Dobb's Journal article on code signing in Adobe AIR.

[6] Creating and validating XML signatures An Adobe Developer Center article on leveraging the XMLSignatureValidator API in Adobe AIR.

White Papers

[1] Adobe AIR 1.0 Security pdf, Adobe.

Presentations

[1] Maintaining Security With Adobe AIR The slide deck for a session on AIR security presented at MAX 2008 by Ethan Malasky and Peleus Uhley.

[2] Designing Secure AIR Applications A video recording of Adobe's Ethan Malasky presenting on AIR Security.

Useful Frameworks

Adobe AIR Update Framework A beta framework for including good update capabilities within your application.

References

[1] AIR Security with Flex This section of the Developing Adobe® AIR™ Applications with HTML and Ajax manual covers security topics such as best practices for developers, AIR sandboxes and Flex security.

[2] AIR Security with HTML This section of the Developing Adobe® AIR™ Applications with HTML and Ajax manual covers security topics such as best practices for developers, AIR sandboxes, and HTML security.

[3] Adobe Security Bulletins and Advisories This is where Adobe posts all of their security advisories and bulletins.

Related Projects

OWASP Flash Security Project