Secure Programming Laboratory 3: Web app security Joseph Hallett - - PowerPoint PPT Presentation

secure programming laboratory 3 web app security
SMART_READER_LITE
LIVE PREVIEW

Secure Programming Laboratory 3: Web app security Joseph Hallett - - PowerPoint PPT Presentation

Secure Programming Laboratory 3: Web app security Joseph Hallett and David Aspinall, Informatics @ Edinburgh 14th March 2014 What is this lab about? Web app security with Gruyere Lab from Google Worth working through Were just


slide-1
SLIDE 1

Secure Programming Laboratory 3: Web app security

Joseph Hallett and David Aspinall, Informatics @ Edinburgh 14th March 2014

slide-2
SLIDE 2

What is this lab about?

◮ Web app security with Gruyere ◮ Lab from Google ◮ Worth working through ◮ We’re just going to focus on a little bit of it

slide-3
SLIDE 3

What is this lab about?

◮ Input validation ◮ Obfuscation ◮ Redirection ◮ Authentication ◮ Exploitation ◮ Little bit of static analysis

slide-4
SLIDE 4

What do we want you to learn

◮ Always check your inputs! ◮ Problems with web security other than SQLi and XSS ◮ Static analysis is great

slide-5
SLIDE 5

Good Luck!

We hope you enjoy the lab.