Testing for Security in the Web 2.0 World

While many are extolling the virtues of the next generation of Internet and Web technologies, others are warning that it could turn the Internet into a hacker's dream. Web 2.0 promises to make applications more usable and connect us in ways that we've never imagined. We’ve just begun to digest a host of exciting technologies such as AJAX, SOAP, RSS, and "mashups." Are we making a big mistake by increasing the complexity of Web applications without taking security into account? Michael Sutton discusses the major security issues we must address when implementing Web applications with the newest technologies and describes poor coding practices that can expose security defects in these applications. Most importantly, Michael discusses testing techniques for finding security defects-before they bite-in this new world.

• The new technologies of Web 2.0
• Major security issues exposed within these technologies
• Techniques for finding Web 2.0 security flaws