Web Application Security

MUST READ Web Application Attacks Learning Guide LEARNING GUIDE - This guide explains how Web application attacks occur, identifies Web application attacks, and provides Web application security tools and tactics to protect against them.

VIDEO: 1 - 3 of 4

	WASC Web Honeypot Project enters next phase SearchSecurity.com | 30 Jul 2009 VIDEO - Ryan Barnett of Breach Security and leader of the WASC Honeypot Project talks about phase three of the project, which uses an open proxy server to analyze Web attack data.

	PCI compliance requirement 6: Systems and applications SearchSecurity.com | 01 Jun 2009 VIDEO - Diana Kelley and Ed Moyle of Security Curve review PCI compliance requirement 6: "Develop and maintain secure systems and applications."

	Defending against Internet security threats and attacks SearchSecurity.com | 24 Dec 2008 VIDEO - From buffer overflows to cross-site scripting, Web threats are many. Security researchers at Information Security Decisions 2008 discuss how to keep enterprises safe from these attacks (part 2 of 4).

	VIEW ALL VIDEO ON WEB APPLICATION SECURITY

NEWS: 1 - 3 of 120

	Cisco acquires SaaS security vendor ScanSafe SearchSecurity.com | 27 Oct 2009 ARTICLE - Move complements Cisco line of IronPort appliances by offering customers Web security gateway services in the cloud.

	Web application firewall use goes beyond compliance, company finds SearchSecurity.com | 22 Oct 2009 ARTICLE - Web application firewall deployments have been mostly driven by the Payment Card Industry Data Security Standards, but one firm has discovered alternative benefits.

	Gumblar Trojan drive-by exploits spike following Adobe update SearchSecurity.com | 20 Oct 2009 ARTICLE - The FTP harvesting Trojan is spreading through legitimate websites, infecting victims in a series of drive-by attacks targeting Web application vulnerabilities.

	VIEW ALL NEWS ON WEB APPLICATION SECURITY

EXPERT TECHNICAL ADVICE: 1 - 3 of 93

WEB APPLICATION SECURITY EXPERTS
			Michael Cobb, featured expert Founder and Managing Director, Cobweb Applications Ltd. ASK A QUESTION

	Preventing SQL injection attacks: A network admin's perspective 03 Nov 2009 TIP - Your database administrators should certainly be following best practices to avoid SQL injections, but network admins can do their part to fight the security exploits, too.

	An enterprise strategy for Web application security threats 01 Oct 2009 TIP - People Security founder Hugh Thompson reviews the tools and tactics, from security assessments to Web application firewalls, that are essential to an application security strategy.

	Scanning with N-Stalker offers basic Web application security assessment 29 Sep 2009 TIP - Demo: Peter Giannoulis of TheAcademyHome.com and TheAcademyPro.com introduces N-Stalker, a free Web application security assessment scanner available for Windows.

	VIEW ALL EXPERT TECHNICAL ADVICE ON WEB APPLICATION SECURITY

REFERENCE & LEARNING: 1 - 3 of 16

	Information security book excerpts and reviews SearchSecurity.com | 19 Feb 2009 INFORMATION SECURITY BOOKSHELF - Visit the Information Security Bookshelf for book reviews and free chapter downloads.

	Quiz: Could you detect an application attack? SearchSecurity.com | 10 Jul 2006 SECURITY QUIZ - Test your application security awareness, review common application attacks and learn how to improve application layer logging to detect and protect against these attacks.

	Web Application Attacks Learning Guide SearchSecurity.com | 11 May 2006 LEARNING GUIDE - This guide explains how Web application attacks occur, identifies Web application attacks, and provides Web application security tools and tactics to protect against them.

	VIEW ALL REFERENCE & LEARNING ON WEB APPLICATION SECURITY

MAGAZINE CONTENT (free subscription required): 1 - 3 of 17

	Choosing the right Web application firewall Information Security Magazine | 05 Mar 2009 FEATURES - PCI DSS is requiring companies to buy Web application firewalls. We'll show how you how to pick the WAF that's right for you.

	How to Secure Cloud Computing Information Security Magazine | 05 Mar 2009 FEATURES - On-demand computing services can save large enterprises and small businesses a lot of money, but security and regulatory compliance become difficult.

	Product Review: Cenzic Hailstorm Enterprise ARC 5.7 Information Security Magazine | 10 Jan 2009 HOT PICK & PRODUCT REVIEWS - Web application security has moved from a niceto- have to a must-have requirement, for data protection and compliance. Cenzic's Hailstorm, which we last reviewed in 2005, reflects the growth in the depth and maturity of Web ...

	VIEW ALL MAGAZINE CONTENT ON WEB APPLICATION SECURITY

WEBCASTS: 1 - 1 of 1

Simplify Your Security Decision - Vendor Webcast VIEW WEBCAST PREMIERED:   05 OCT 2004, 12:00 EDT (16:00, GMT) SUMMARY:   Today's security threats are more sophisticated, frequent and dangerous than ever before. Traditional antivirus and firewall point products are no longer capable of providing adequate protection. Learn how to simplify this decision with a unified, proactive approach to internet security.

	VIEW ALL WEBCASTS ON WEB APPLICATION SECURITY

DEFINITIONS: 1 - 3 of 12

	JavaScript hijacking 20 Jun 2007 WORD - JavaScript hijacking is a technique that an attacker can use to masquerade as a valid user and read sensitive data from a vulnerable Web application, particularly one using Ajax (Asynchronous JavaScript and XML). Nearly all ...

	threat modeling 14 Feb 2006 WORD - Threat modeling is a procedure for optimizing network security by identifying objectives and vulnerabilities, and then defining countermeasures to prevent, or mitigate the effects of, threats to the system. In this context, a ...

	dictionary attack 21 Apr 2005 WORD - A dictionary attack is a method of breaking into a password-protected computer or server by systematically entering every word in a dictionary as a password. A dictionary attack can also be used in an attempt to find the key ...

	VIEW ALL DEFINITIONS ON WEB APPLICATION SECURITY

	SEE ALSO - Topics Related to Web Application Security:  Web Browser Security, Web Services Security and SOA Security, Web Server Threats and Countermeasures, Web Application and Web 2.0 Threats