During the 6th OWASP AppSec Conference in Italy, I presented
a research
about testing for security vulnerabilities in Flash
applications.
Abstract:
My work describes several security flaws in Flash
Applications and bad
habits in ActionScript coding, by analysing real world swf
applications
flaws and potential vulnerabilities that could lead to
client side
attacks. A new kind of attack called Cross Site Flashing is
also
explained.
Blog Entry:
http:
//www.wisec.it/sectou.php?id=464dd35c8c5ad
Pdf Version:
http://www.wisec.it
/docs.php?id=5
Swf Version:
http://www.wisec.it
/docs.php?id=6
Any comment will be really appreciated.
Regards,
Stefano
--
...oOOo...oOOo....
Stefano Di Paola
Software & Security Engineer
Owasp Italy R&D Director
Web: www.wisec.it
..................
|