Web Application Attacks and Countermeasures: Cases Studies from Financial Systems
0 g$ i# h' k ~: n& W2 k1 B9 }5 t* W" b% o" j8 A' r9 z5 k/ _4 L! l/ O2 S
时间:
Jan 23th 2:30pm
$ K9 h6 _, r9 u' B. z y h2 O6 r2 Z地点: EBC church secondfloor meeting room.
) @7 V& a/ u1 n p5 d4 O+ { d1 n
2121 Cedar Hill Cross Rd.
' W5 F0 t" v( L$ X
: b& t8 p$ L9 T3 {7 }Presented By: D
r. Yanguo (Michael) Liu
2 U+ n- v- o- z& U! @3 A% q
5 h2 W4 n- S8 q3 [9 w8 w$ I+ }) _+ p7 c) x# y2 x
Summary: Web applications are commonly provided by today’s financialorganizations, supporting diverse online services in various businesscontexts. Attacks and malicious activities targeting on webapplications of financial systems increased dramatically in recentyears as traditional network-level security devices can’t detect andcounter adequately web application attacks. Compromises of webapplications can lead to the exposure of business crucial informationstored on the backend database system. Some web attacks areparticularly concerned by application developers since severe financiallosses can be caused by the success of those attacks. This presentationwill introduce some typical attack types faced by financial webapplications along with their corresponding real life mitigatingcontrols.
% M6 C5 `8 [ K7 J1 f* E# t$ ?3 d8 b d9 r* @, [$ M/ E, F5 A
Speaker's brief Bio:Dr. Yanguo (Michael) Liu received his B.Eng (Electrical Engineering)from HIT, China and MAsc. PhD degrees in softwareengineering from University of Victoria, Canada. His academic researchfocused on technologies andmethodologies in software security engineering, including formalverification of software specification and software security metrics,etc. Dr. Liu started to work in industry during his graduate studiesand have obtained experiences in different domains of informationsecurity, such as Cryptography, Operating system security, andApplication and Systems Development Security, etc. He is currentlyworking as an application security consultant for the global ITsecurity team, HSBC Inc. Michael also maintains a certified informationsystemssecurity professional (CISSP).
) @& z& ?0 h* G2 m$ p
w: C# e m6 c4 c D3 a0 ]) j, o# l* V5 |* C( ^
Everyone is welcome!
' M2 N' G n* A7 P8 J; q& s- |& r S+ s. r3 c# f! E) D2 S% q
欢迎大家加入
维多利亚 IT 俱乐部: Currently over 100 members
$ c+ W$ {+ w* b N* Ghttp://groups.google.com/group/victoria_it?hl=en
