OWASP AppSec Asia 2008: Proxy Caches and Web Application Security


 
Thread Tools Search this Thread
Special Forums News, Links, Events and Announcements Complex Event Processing RSS News OWASP AppSec Asia 2008: Proxy Caches and Web Application Security
# 1  
Old 10-03-2008
OWASP AppSec Asia 2008: Proxy Caches and Web Application Security

Tim Bass
10-03-2008 04:05 AM
Back to travelling a bit, I have accepted an invitation from Wayne Huang, Chapter Leader, OWASP Taiwan,* to give the following presentation at OWASP AppSec Asia 2008, October 27 - 28, 2008, in Taipei:

Proxy Caches and Web Application Security
Abstract:* Proxy caches, combined with poorly written session management code, can easily lead to serious Internet security breaches. Web application developers cannot know whether their content is consumed directly or via a proxy cache. Developers cannot assume that the HTTP responses will be delivered to the intended browser. Moreover, developers cannot be sure that the intended browser even receives the intented content. Consequently, proxy caches are a serious theat to web application security. *In the presentation, we will discuss the recent security breach Tim found in Google Docs and review web application security and session management topics related to proxy caching.

Source...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
Net::Proxy::Connector::tcp(3pm) 			User Contributed Perl Documentation			   Net::Proxy::Connector::tcp(3pm)

NAME
Net::Proxy::Connector::tcp - Net::Proxy connector for standard tcp proxies SYNOPSIS
# sample proxy using Net::Proxy::Connector::tcp use Net::Proxy; my $proxy = Net::Proxy->new( in => { type => tcp, port => '6789' }, out => { type => tcp, host => 'remotehost', port => '9876' }, ); $proxy->register(); Net::Proxy->mainloop(); DESCRIPTION
"Net::Proxy::Connector::tcp" is a connector for handling basic, standard TCP connections. CONNECTOR OPTIONS
The connector accept the following options: "in" o host The listening address. If not given, the default is "localhost". o port The listening port. "out" o host The remote host. o port The remote port. o timeout The socket timeout for connection ("out" only). AUTHOR
Philippe 'BooK' Bruhat, "<book@cpan.org>". COPYRIGHT
Copyright 2006 Philippe 'BooK' Bruhat, All Rights Reserved. LICENSE
This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. perl v5.10.1 2009-10-18 Net::Proxy::Connector::tcp(3pm)