Christian Wenz
Arrabiata Solutions GmbH
Christian Wenz is an author, consultant and trainer focussing on web technologies and web application security. He wrote or co-wrote over 100 books, is a fixture at international developer conferences since 2001, and is one of the subject matter experts (SME) of the Zend PHP 5 certification. His day job at Arrabiata Solutions includes conducting security audits, migrating old code bases, implementing complex web applications and helping companies choose the right mix of technologies for their web strategy. Christian holds both a degree in computer science and in business informatics.
Web Application Security in the Ajax Age View session page
English session
Ajax applications make heavy use of JavaScript, Web 2.0 applications rely on loads of user-generated content, plugins may allow developers (and attackers) more than traditional web technologies. This session will feature web application security with focus on modern web applications. You will see old attacks with new twists, new ways to hurt users and/or a web application, and will understand ways to prevent automated HTTP requests. We will also analyze features (and security measures) of plugins, and why especially men are involuntarily helping attackers to succeed.
RIA Best Practices View session page
English session
Ajax is awesome, Rich Internet Applications are even better. Yet some problems are inherent. Back/forward browser buttons cease to work, the number of concurrent HTTP connections is limited, some technologies offer no decent error handling for HTTP requests, keeping the application code free from security vulnerabilities is harder than before, client performance is much more at risk than with traditional web applications, search engines could ignore you completely, and many more. This session will identify these and other issues and provide you with best practices to overcome these limitations or even use them to your advantage.
