The Security Risks of Web 2.0

Architecture and Background

The security risks of Web 2.0 David Rook Web 2.0 technologies are changing the landscape of the Internet by delivering significant increases in the functionality of websites and providing a more interactive experience to the user. This rapid proliferation of new technologies is also accompanied by new attack vectors that hackers are eager to exploit.

Vulnerability Analysis

I will detail the security risks introduced by web 2.0 and how you can prevent them. David Rook works as a Security Analyst for Realex Payments in Dublin.

Exploitation and Demonstrations

He's an author of the OWASP Code Review Guide and contributes to several other OWASP projects including the browser security framework working group. He has presented at several conferences including OWASP Ireland chapter meetings.

Remediation and Defensive Strategies

David is a member of the OWASP Ireland board and the Irish Internet Association Web Development Working Group helping to publicize web application security within Ireland. In addition to his work with OWASP and the IIA, he has his own security website and blog which can be found here: www.securityninja.co.uk/blog. He has also had articles published in (in)secure magazine. More recently he has found security flaws in the Facebook website and provided guidance to them on how to fix the flaw. For copies of the slides and additional materials please see the DEF CON 17 Archive here: