Application Attacks (Buffer Overflows, Cross-Site Scripting)

VIDEO: 1 - 2 of 2

	Balancing security and performance: Protecting layer 7 on the network SearchSecurity.com | 21 May 2009 VIDEO - This video will explain options for securing application-layer traffic using network security technologies, architectures and processes, including Layer 7 switches, firewalls, IDS/IPS, NBAD and more.

	Defending against Internet security threats and attacks SearchSecurity.com | 24 Dec 2008 VIDEO - From buffer overflows to cross-site scripting, Web threats are many. Security researchers at Information Security Decisions 2008 discuss how to keep enterprises safe from these attacks (part 2 of 4).

	VIEW ALL VIDEO ON APPLICATION ATTACKS (BUFFER OVERFLOWS, CROSS-SITE SCRIPTING)

NEWS: 1 - 3 of 152

	Month of Twitter Bugs project to document Twitter flaws SearchSecurity.com | 17 Jun 2009 ARTICLE - Security researcher Aviv Raff will document a number of cross-site scripting (XSS) flaws and other errors threatening Twitter users.

	Adobe issues first quarterly patch release fixing 13 flaws SearchSecurity.com | 09 Jun 2009 ARTICLE - Adobe's first quarterly security patch release includes fixes for critical vulnerabilities in Adobe Reader and Adobe Acrobat.

	Adobe issues Reader update fixing zero-day flaw SearchSecurity.com | 13 May 2009 ARTICLE - Exploit code to attack a remote code execution flaw in Adobe Reader was available in the wild.

	VIEW ALL NEWS ON APPLICATION ATTACKS (BUFFER OVERFLOWS, CROSS-SITE SCRIPTING)

EXPERT TECHNICAL ADVICE: 1 - 3 of 63

APPLICATION ATTACKS (BUFFER OVERFLOWS, CROSS-SITE SCRIPTING) EXPERTS
			John Strand, featured expert ASK A QUESTION

	PCI management: The case for Web application firewalls 23 Apr 2009 TIP - Expert Michael Cobb lays out the compliance and security benefits of Web application firewalls.

	How to detect input validation errors and vulnerabilities 02 Apr 2009 EXPERT ANSWER - Expert John Strand reviews how to spot input validation flaws on your websites.

	Vulnerability test methods for application security assessments 25 Mar 2009 TIP - Learn what to do when you have a huge portfolio of potentially insecure applications, limited resources and an overwhelming sense of urgency.

	VIEW ALL EXPERT TECHNICAL ADVICE ON APPLICATION ATTACKS (BUFFER OVERFLOWS, CROSS-SITE SCRIPTING)

REFERENCE & LEARNING: 1 - 3 of 21

	Information security book excerpts and reviews SearchSecurity.com | 19 Feb 2009 INFORMATION SECURITY BOOKSHELF - Visit the Information Security Bookshelf for book reviews and free chapter downloads.

	Quiz: Mitigating Web 2.0 threats SearchSecurity.com | 12 Nov 2008 QUIZ - Take this five-question quiz to test your knowledge of social networking sites, software-as-a-service and common Web attacks and threats.

	Googling Security: How Much Does Google Know About You? SearchSecurity.com | 22 Oct 2008 BOOK CHAPTER - In an excerpt from Googling Security: How Much Does Google Know About You?, author Greg Conti explains how attackers exploit advertising networks to compromise end-user machines.

	VIEW ALL REFERENCE & LEARNING ON APPLICATION ATTACKS (BUFFER OVERFLOWS, CROSS-SITE SCRIPTING)

MAGAZINE CONTENT (free subscription required): 1 - 1 of 1

	The Pipe Dream of No More Free Bugs Information Security Magazine | 07 May 2009 COLUMNS - Security researchers have declared they want vendors to compensate them for their independent search for vulnerabilities.

	VIEW ALL MAGAZINE CONTENT ON APPLICATION ATTACKS (BUFFER OVERFLOWS, CROSS-SITE SCRIPTING)

WEBCASTS: 1 - 3 of 6

How to Defend Your Organization from Web-Based Threats while Hackers Move into Business Mode - Vendor Webcast VIEW WEBCAST PREMIERED:   16 NOV 2006, 12:00 EST (17:00, GMT) SUMMARY:   This webcast takes a glance ahead at the types of threats expected in 2007, what you can expect and how to be prepared to meet the challenge of these evolving threats. Prepare your company to defend against future web and hacker threats and attend this webcast today.

	Web-Borne Attacks: Security Audits Expose the Silent Threat to Corporate Networks - Vendor Webcast VIEW WEBCAST PREMIERED:   23 MAY 2006, 14:00 EDT (18:00, GMT) SUMMARY:   Check out this webcast and discover effective strategies to defend Web-based threats and protect your company's valuable data.

	Aware Defense: Trends in Spyware, Adware, and Potentially Unwanted Applications - Vendor Webcast VIEW WEBCAST PREMIERED:   11 MAY 2006, 14:00 EDT (18:00, GMT) SUMMARY:   Join Peter Firstbrook, Gartner Research Director, as he examines the latest trends and issues in spyware, adware and potentially unwanted applications (PUAs).

	VIEW ALL WEBCASTS ON APPLICATION ATTACKS (BUFFER OVERFLOWS, CROSS-SITE SCRIPTING)

DEFINITIONS: 1 - 3 of 12

	JavaScript hijacking 20 Jun 2007 WORD - JavaScript hijacking is a technique that an attacker can use to masquerade as a valid user and read sensitive data from a vulnerable Web application, particularly one using Ajax (Asynchronous JavaScript and XML). Nearly all ...

	cache poisoning 03 May 2005 WORD - Cache poisoning, also called domain name system (DNS) poisoning or DNS cache poisoning, is the corruption of an Internet server's domain name system table by replacing an Internet address with that of another, rogue address. ...

	dictionary attack 21 Apr 2005 WORD - A dictionary attack is a method of breaking into a password-protected computer or server by systematically entering every word in a dictionary as a password. A dictionary attack can also be used in an attempt to find the key ...

	VIEW ALL DEFINITIONS ON APPLICATION ATTACKS (BUFFER OVERFLOWS, CROSS-SITE SCRIPTING)

SEE ALSO - Topics Related to Application Attacks (Buffer Overflows, Cross-Site Scripting):  Open Source Security Tools and Applications, Virtualization Security Issues and Threats, Email Protection, IM Security Issues, Risks and Tools, Software Development Methodology, Web Security Tools and Best Practices, Enterprise Vulnerability Management, Application Firewall Security, Securing Productivity Applications, Database Security Management, Operating System Security, Secure SaaS: Cloud services and systems