Web vulnerability and exploits

FIRST TC hands-on classes

Wednesday — January 30th, 2008 13:30

Wednesday — January 30th, 2008 15:50

Web applications have become an interesting target to attacks due the high quantity of sensible data put online. Unfortunately, keep these applications safe rely on from server secure installation to the planned application development and tests. We are going to demonstrate how some attacks can take advantage of simple systems vulnerabilities or even very complex ones to compromise web applications.

Format

It will be done a brief introduction about web applications threats followed by two exercises showing the exploration of vulnerabilities on web applications. To participate students are advised to install vmware (www.vmware.com). Images will be provided during class.

Presenters

• Atanaí Ticianelli (CAIS/RNP — Brazilian Academic and Research Network, BR)

  Atanaí Sousa Ticianelli holds an Engineer degree in Computer Engineering at Universidade Federal de São Carlos - UFSCar along with one post-graduate degree, obtained from the Computer Science Institute of Universidade de Campinas - Unicamp. He holds GSIP (GIAC Secure Internet Presence) also. Working as security analyst at the Brazilian Research and Academic Network CSIRT (CAIS), he has 5 years of experience in the security field. He is currently working on the secure maintenance of CAIS's servers.