Web Application Security
D-Krypt - Web Application Security.
Summary
Architecture and Background
D-Krypt present 'Web Application Security' at DEF CON 8, reviewing foundational threat dynamics and system principles surrounding web-security, appsec, input-validation, session-management in the appsec arena.
Vulnerability Analysis
The technical analysis dissects design vulnerabilities, protocol flaws, and architectural assumptions relevant to enterprise networks.
Exploitation and Demonstrations
D-Krypt - Web Application Security
Remediation and Defensive Strategies
System defenders and security engineers are provided actionable hardening steps, monitoring indicators, and mitigation guidelines to reduce exposure.
Related talks
Main Stage·40 min
Dongsung Kim
Dongsung Kim demonstrates how modern browser features and emerging Web APIs can be chained to resurrect Cross-Site Request Forgery (CSRF) despite SameSite cookies.
Main Stage·40 min
James Kettle
PortSwigger researcher James Kettle pioneers HTTP/2 request smuggling, uncovering critical implementation flaws when front-end reverse proxies downgrade to back-end HTTP/1.1.
Main Stage·44 min
John Menerick
John Menerick details open Source Fairy Dust John Menerick SECURITY RESEARCHER, NETSUITE Over the past 30 years, the Internet and open source software have worked in tandem.