How Cybercriminals Steal Money

Google Tech Talks
June, 16 2008

ABSTRACT

Attend this session and learn how you can prevent today's most significant data security vulnerabilities—the kind that leave businesses open to fraud that ranges from capturing tens of millions of credit card numbers to stealing money from bank accounts to constructing next-generation botnets. We'll review how cross-site request forgery, cross-site script inclusion and SQL injection attacks work and discuss their impact on Web 2.0, AJAX, mashup and social networking applications. We'll present industry-wide statistics on security vulnerabilities, cover emerging security trends and discuss the current state of security education. Then we'll tell you how to defend against security attacks and how to modify your software development process to achieve security, and we'll recommend certification programs, books and organizations that can help you secure your applications.



Speaker: Neil Daswani
Neil Daswani has served in a variety of research , development, teaching, and managerial roles at Google, Stanford University , DoCoMo USA Labs, Yodlee, and Bellcore (now Telcordia Technologies). While at Stanford, Neil cofounded the Stanford Center Professional Development (SCPD) Security Certification Program (http://proed.stanford.edu/?security). His areas of expertise include security, wireless data technology, and peer-to-peer systems. He has published extensively in these areas, frequently gives talks at industry and academic conferences, and has been granted several U.S. patents. He received a Ph.D. and a master's in computer science from Stanford University, and earned a bachelor's in computer science with honors with distinction from Columbia University. Neil is also the lead author of "Foundations of Security: What Every Programmer Needs To Know" (published by Apress; ISBN 1590597842; http://tinyurl.com/33xs6g )

Category:

People & Blogs

Tags:

• google
• techtalks
• techtalk
• engedu
• talk
• talks
• googletechtalks
• education

[saizai]

This talk is misnamed. It should have been titled something like "Basic web vulnerabilities - SQL injection, XSRF, XSS, etc." Same ol' same ol'.

I was expecting something about electronic money laundering and was therefore disappointed.

[Need4speed696]

i guess they had a good turn out... all the chairs all filled with lots of people :)

[bodypiercing1989]

@saizai same here bro..

[wizardmori]

I move the world with infinite abilities power and eternal force. I earn a big sum and make money endlessly.

無限の能力で世界を動かす。無限に巨額を稼ぐ。

[Lehabey]

Should spell '=' instead of 'IS' in "select passwd..." sql. 'IS' is used for testing for null values.

Time: 09:54

[wizardmori]

I increase cyber money endlessly and should be able to put. Because I wrote on the Internet in all over the whole world, and entered and printed, and spread and opened and expanded extended expansion. I can do in freedom in the whole world.

俺ならサイバーマネーを無限に増やしておける筈だ。インターネッ­ト上に全世界中に書き込み入れ印刷し広げ広がり拡大拡張拡充して­来たのだから。全世界中自由自在に出来る。

[HeadGirl]

thank you x x

[coolncrazzy1]

@vigra83 dude its removed :( did you watch it can u tell me what it said? :/

[vigra83]

Facebook Password Hack /watch?v=xnUquVTh_4Y

[pzmtuthcvpvl]

@longfootbuddy you mean hamsters are the ones eating all the wells i bought online?... now i know who to send the coupons to