This tutorial explains in simple terms what the SQL Injection vulnerability is, and how real threats result from this typical exploitation. It features a sample exploitation scenario illustrating clear steps of what an attacker may do with a website which is vulnerable to error based SQL Injection.
Since 2004 Injection Flaws and Cross-Site Scripting (XSS) has topped the OWASP Top Ten of most harmful vulnerabilities. Time to do something about it. In this code kata we address both Injection Flaw as well as XSS by applying techniques from Domain Driven Design – thus Domain Driven Security. In …
Security is important! Here I show seven different security flaws which are common to Rails applications ranging from mass assignment to CSRF protection. http://railscasts.com/episodes/178-seven-security-tips
There are a number of areas where rails can help web application developers ensure that their applications are appropriately secured (eg, CSRF protection and encoding of output) but there are others which can never really be addressed by frameworks alone. Additionally it’s very easy when developing an application to make …
An explanation on benefits of certification on the Java platform
