CRCS Privacy & Security Lunch Seminar - Wed. April 18
Speaker: Ben Adida, Harvard CRCS
Date: Wednesday, 18 April
Time: talk 12-1, discussion 1-1:30 (lunch provided)
Place: Maxwell Dworkin 119
Title:
Web (2.0) Security
Abstract:
The emergence of complex collaborative web applications, so-called “web
2.0″, presents a number of fascinating security challenges. In the mad rush
to create ever more useful applications, developers walk a very fine line,
tricking browsers and finding ways around existing security constraints
while attempting to protect users’ private data. The mashup trend, where
different web applications are combined on the fly, is of particular
interest here: mashups provide fascinating new features yet present the most
challenging security problems.
In this talk, we’ll review classic and advanced web security issues and
recent application-level exploits. We’ll then discuss some proposals for
improving the state of secure web application development. Discussion is
strongly encouraged, as this talk will not attempt to provide an
all-encompassing solution.