24C3: Ruby on Rails Security

Speaker: Jonathan Weiss

This talk will focus on the security of the Ruby on Rails Web Framework. Some dos and don'ts will be presented along with security Best Practices for common attacks like session fixation, XSS, SQL injection, and deployment weaknesses.

This talk will cover most of the common web application vulnerabilities like Cross Site Scripting and Cross Site Request Forgery, SQL and Code injection, and deployment security and how they apply to Rails. Further Ruby on Rails specific issues like Rails plugin security, JavaScript/Ajax security, and Rails configuration will be examined and best practices introduced.

For more information visit: http://bit.ly/24c3_information
To download the video visit: http://bit.ly/24c3_videos

Category:

Science & Technology

Tags:

• security
• web
• application
• best
• practices