Building Secure Websites

On October 1, 2009 I gave the following seminar:

“Building Secure Websites”
(or how to avoid Cookie Traps!)

Jeff Schiller will talk about some of the recent attacks against websites (and some not so recent attacks!) and how to defend against them.

Many websites are a place to provide access to “static” content. But as you add dynamic and personalized features, you begin to turn a web site into an application. But to do this you have to have a way for people to authenticate themselves and for you to manage their “state” while logged in. At first glance this appears easy. However authenticating people and keeping track of their state is tricky if you want to do it securely!

The event will (did) take place on Thursday October 1, 2009 in Twenty Chimneys (W20-306). We will offer pizza at 12:00 noon and the talk will begin promptly at 12:30 p.m.

Slides from the presentation

Copyright © 2009-2023 Jeffrey I. Schiller