Analysis and Detection of Authentication Cross-Site Request Forgery - AppSec EU 2017
Stuck in Tutorial Hell? Learn Backend Dev the Right Way
Start speaking a new language. It’s just 3 weeks away.
Overview
AI, Data Science & Cloud Certificates from Google, IBM & Meta — 40% Off
One plan covers every Professional Certificate on Coursera. 40% off Coursera Plus Annual.
Unlock All Certificates
Explore critical web application security threats in this 30-minute conference talk from AppSec EU 2017. Delve into Authentication Cross-Site Request Forgery (CSRF) attacks, their potential for sensitive information theft and account hijacking, and learn seven manual security testing strategies for vulnerability detection. Discover CSRF-Checker, a proof-of-concept tool based on OWASP ZAP for semi-automatic Authentication CSRF detection. Examine alarming results from testing Alexa top 1500 websites, revealing 191 vulnerable sites including those from major vendors like Microsoft and Google. Gain valuable insights into web application security and CSRF prevention techniques from OWASP Foundation's comprehensive presentation.
Syllabus
AppSec EU 2017 Analysis And Detection Of Authentication Cross Site Request Forgery by Luca Compagna
Taught by
OWASP Foundation