Presentation: "Common Security Weaknesses in Java Web Apps and How to Avoid them"
Track:
Security: A Developers View
Time: Monday 10:50 - 11:50
Location: Robinson/Whitman
Abstract:
Implementing secure Web Applications requires an understanding of broad range of vulnerabilities and how to avoid them.
Secure application development is the product of a security focus that spans the entire SDLC, and that requires insight into
how applications are attacked and compromised.
In this talk we will examine common weaknesses found in Java Web Apps, and provide specific guidelines on how to avoid them,
including:
Each vulnerability will be summarized, presented as a real-life J2EE scenario, and then the proper mitigation strategy described.
Secure application development is the product of a security focus that spans the entire SDLC, and that requires insight into
how applications are attacked and compromised.
In this talk we will examine common weaknesses found in Java Web Apps, and provide specific guidelines on how to avoid them,
including:
- Authentication
- Access Control
- Session Hijacking
- Cross-site Scripting
- Command Injection
- SQL Injection
- Path Traversal
- Format Strings
- Error Handling
- Application Logic
- Multi-Tier Architectures
Each vulnerability will be summarized, presented as a real-life J2EE scenario, and then the proper mitigation strategy described.
