The Dark Side of Ajax

The Ajax revolution is written in JavaScript. After the introduction of Google Maps, the Web is sprouting new Ajax-enabled applications every day. This talk considers the security implications of Ajax and the pitfalls and alternatives involved in creating rich web applications.

• The range of technology and coding styles that come under the name Ajax
• Exploiting old bugs in new ways: Ajax for malware
• The ways Ajax changes the conventional web security landscape
• The ways Ajax doesn’t change the conventional web security landscape
• JavaScript Hijacking: an Ajax-specific security problem
• The future of Ajax security

We will look at popular Ajax programming frameworks and how they can make or break the security of an application. What happens when you point out the same vulnerability in 12 frameworks on the same day? Come find out!