Website Vulnerabilities

Nov 9, 2009   //   by Ben Griswold   //   Blog  //  No Comments

The folks at the Open Web Application Security Project publish a list of the top 10 vulnerabilities. In a recent CodeBrew I provided a quick overview of them all and spent a good amount of time focusing on the most prevalent vulnerability, Cross Site Scripting (XSS).

I gave an overview of XSS, stepped through a quick demo (sorry vulnerable site), reviewed the three XSS variations and talked a bit about how to protect one’s site.

References and reading materials were also included in the presentation and, look at that, they are provided here too.

  1. Open Web Application Security Project
  2. The OWASP Top Ten Vulnerabilities (pdf)
  3. OWASP List of Vulnerabilities
  4. The 56 Geeks Project by Scott Johnson
  5. ha.ckers.org
  6. OWASP XSS Prevention Cheat Sheet
  7. Wikipedia
  8. Is XSS Solvable?, Don Ankney
  9. The Anatomy of Cross Site Scripting, Gavin Zuchlinski

Leave a comment

(will not be published)

CAPTCHA Image
*

Recent Posts

Tag Cloud

Unit Test const reference Mark Zuckerberg IT outsourcing services Least Common Multiple .NET -- html Macs LINQ passwords Firefox Google Chrome technologies Diagrams social media marketing jQuery malware Postfix operator Session culture Anniversary Operating Systems web.config OCMock outsourcing IT outsourcing php Opinion hanoi racket scheme lisp code club adobe flash NuGet data migrations test-driven development Testing recruiting reliability development incentives caching Automation longevity ASP.NET PCs Google Android re-linq jQuery form validator pointer IPO operator++ Mike Mannion PowerShell Objective-C OCUnit Flashback Virus Java Best Practices IE8 server administration mysql safari applications lorrie hunsaker xCode Windows Phone History privacy Prefix operator puppet quality outsourcing managing projects ASP.NET MVC 3 JavaScript continuous integration Facebook Scrum performance Windows Software Python Android Ben Griswold Steve Jobs code review quality Programming Noah Heldman Agile Ray Mitchell Ruby repository iPhone C++ SharpRepository Rails 3.2 software development apple Jeff Treuting brett humphrey