Web Application Security in the Ajax Age

Ajax applications make heavy use of JavaScript, Web 2.0 applications rely on loads of user-generated content, plugins may allow developers (and attackers) more than traditional web technologies. This session will feature web application security with focus on modern web applications. You will see old attacks with new twists, new ways to hurt users and/or a web application, and will understand ways to prevent automated HTTP requests. We will also analyze features (and security measures) of plugins, and why especially men are involuntarily helping attackers to succeed.