Muhammad Ahmad Khan
Security Engineer, IBM
Ahmad Khan is a security engineer at IBM where he works on securing cloud services.
Silicon Valley Code Camp : October 3rd and 4th 2015Session
Hacking web applications: practical offense and defense
This talk will discuss common security vulnerabilities in web applications and techniques to avoid them.
About This Session
It's on the news: yet another web application was compromised. With everything moving rapidly to the cloud, web security has become more important and relevant than ever. This presentation will walk you through real-life security vulnerabilities discovered in IBM Bluemix. Because these issues can appear in anybody's code, you will gain an understanding of pitfalls to avoid in your own applications. We will explain and exploit prevalent vulnerabilities such as XSS, CSRF, SQL injection, and broken session management. We will also discuss techniques and practices to reduce the likelihood of vulnerabilities appearing in your products.
The Speaker(s)