Anand Vemuri: Offensive and Defensive Strategies for Client-Side JS Security - JSConf Budapest 2016
2,999 views · Published 16 June 2016 · 27:47 · Indexed 18 October 2026
Channel: JSConf · 2016 · Science & Technology
Secure software development principles have become of paramount importance in recent times. Studies have revealed that corporate cyber security breaches have most frequently occurred at the web application layer. Furthermore, within the web application security landscape, client-side attack vectors have been known to be particularly dangerous if exploited. Most client-side security resources tend to primarily discuss Cross-Site Scripting (XSS) exploits and remediation tips. This talk will specifically focus on the other less common client-side vulnerabilities that are not as frequently discussed. Intentionally vulnerable applications developed with client-side JavaScript frameworks will be attacked and exploited live. Remediation strategies will also be discussed so that developers have tools to prevent these vulnerabilities. Through strengthening the security posture of JavaScript applications, we can take strides towards creating a more secure Internet. http://jsconfbp.com/speakers/anand-vemuri.html
More from this channel
-
29:49
Michael Bebenita & Shu-yu Guo: Low Level JavaScript
-
29:19
Michael Starzinger: The Footprint of Performance
-
27:17
Florian Loitsch: JavaScript as a compilation target - Making it fast
-
32:24
Jing Jin & Matthew Delaney: The Web's Black Magic
-
31:38
Anders Heijlsberg & Luke Hoban: Introducing TypeScript
-
24:59
Kevin Markman: Taking Web Apps Offline
-
26:28
Max Krohn: IcedCoffeeScript
-
30:46
Sam Dutton: WebRTC: Real-time communication without plugins