September 2008 - Following the White Rabbit Blog -

AJAX - Implications for Web Application Security

I'm out here in beautiful New York City with some good friends elbow-deep in Web Application Security topics, but of course I won't be neglecting you readers who so graciously passed in your questions from the Ottawa and Montreal workshops. To...

Published 09-25-2008 4:03 AM by RafalLos

Filed under: AJAX, AJAX security

So long Canada... on to AppSec/NYC!

To everyone who attended one of the workshops in either Ottawa or Montreal in the last 2 days - thank you for coming, and I hope you got everything you wanted out of it. If you missed it - we covered the following topics: Web Application Security background...

Published 09-23-2008 7:27 PM by RafalLos

Filed under: workshop

SQL Injection - Real and In Your Face

Not every company has consumer data contained within the web applications. I get that. Logic fails me, however, when someone tries to explain to me why because they don't have consumer data (or other critical data that can be "stolen" from...

Published 09-18-2008 3:58 AM by RafalLos

Filed under: businessweek attack, sql injection attack, sql injection, adware, businessweek hack, malware distribution

Web Application Security - Creating Awareness

You can preach. You can threaten. You can send links to articles from the Wall Street Journal's front page. ... but until it happens to someone your company is in direct competition with, no one listens. Of course, the minute a data breach happens...

Published 09-16-2008 3:08 PM by RafalLos

Filed under: web application security business case, security awareness, web application security awareness

Case Study: Right vs Right Now in a Big Company

As stated in a previous entry, I'm going to break down some of the [nameless] case-studies I've got in my notebook over the last several months. As a note, if you read one of these and think it's you... feel free to tell me if I've missed...

Published 09-09-2008 2:01 AM by RafalLos

Filed under: security program, case study, application security case study, web application security case study

Attention App Sec Professionals in Ottawa and Montreal, Canada!

... we've got a workshop coming to Ottawa and Montreal coming in September. You read it right... I'll be up in Ottawa, CA on Sept. 22nd, and Montreal, CA on Sept. 23rd giving 2 feature-packed workshops that you can't afford to miss if you...

Published 09-04-2008 4:28 AM by RafalLos

Filed under: hacking demonstration, live web application hacking, live hacking workshop, web application hacking live, web application security workshop

Obstacles to Building a Successful Security Program [part 1]

Since February, I've been traveling and meeting with IT Security leaders, CISOs, Program Managers and other folks in charge of application security for their business and a few themes have recurred. I'm fascinated by the differing scenarios and...

Published 09-04-2008 3:04 AM by RafalLos

Filed under: application security, application security program challenges, application security program

September 2008 - Following the White Rabbit Blog

Syndication

Recent Posts

Tags

Archives