MetaBUG

Matt Fisher will be presenting his talk entitled Mistakes to Lure Hackers: Vulnerability 2.0 at this month’s CapBUG meeting. Matt is a Senior Security Engineer at SPI Dynamics and shares leadership of the Washington DC OWASP chapter.

Cross-Site-Scripting and SQL Injection are now the most commonly reported vulnerabilities in the CVE. We will examine the entire genre of web application security and the unique security paradigm required, while zooming in on XSS and SQL Injection. Think Web 2.0 sites are neat? So do the bad guys and we’ll examine some of the factors going into the “new web” that makes them so vulnerable to script attacks.

I was in NYC for his talk at LinuxWorld Open Solutions Summit. Although the talk is not BSD-specific, it is very informative and should be of particular interest to BSD Systems Administrators who pride themselves on high security. Matt is a very engaging speaker and highly experienced with his subject matter. This will be the first presentation to be streamed live via the MetaBUG, but if you’re in the DC area, you’ll still want to come out and see it live! The meeting location is at SPARTA in Columbia, MD.

Directions to SPARTA