Cambridge

Local News
Application Security Seminar – Cambridge OWASP Chapter Meeting

“The O2 Platform : Exploiting and Fixing Microsoft ASP.net MVC Vulnerabilities” Wednesday 5th December 2012 18:00 – 20:00

Hosted by the Department of Computing & Technology, Anglia Ruskin University, OWASP (Open Web Application Security Project) Cambridge Chapter and IEEE Industrial Electronics Chapter

Guest speaker: Dinis Cruz

The O2 Platform : Exploiting and Fixing Microsoft ASP.net MVC Vulnerabilities. The OWASP O2 platform represents a new paradigm for how to perform, document and distribute Web Application security reviews. O2 is designed to Automate Security Consultants Knowledge and Workflows and to allow non-security experts to access and consume Security Knowledge. O2 can also be a very powerful prototyping and fast-development tool for .NET (see VisualStudio Extension C# REPL - O2 Platform).

In this presentation, it will be explained how the O2 platform can be used to exploit the overposting vulnerability on top of Microsoft MVC framework. This use case is very important considering that the industry is adopting this framework to build the most efficient and standard compliant applications. In addition it will be illustrated how easy it is to leave the door open in applications and allow attackers to change the behaviour of these products.

Dinis Cruz is a Security Consultant based in London (UK) and specialized in: ASP.NET/J2EE Application Security, Application Security audits and .NET Security Curriculum Development.

Agenda

18:00 – 18:15 Welcome from the OWASP Cambridge Chapter Leader, Adrian Winckles, Senior Lecturer in  Information Security, Anglia Ruskin University 18:15 – 19:00 “The O2 Platform : Exploiting and Fixing Microsoft ASP.net MVC Vulnerabilities”, Dinis Cruz 19:00 – 19:15 OWASP Summer of Code, Future Development Opportunities Future Chapter Events & Conferences 19:15 – 20:00 Refreshments & Networking (sandwiches, coffee, tea, juice) in LAB006

Registration

To register for this free event, please register online at

http://www.surveymonkey.com/s/S37JMJP

Please note there is no automatic notification or confirmation.

The conference will be held in the Lord Ashcroft Building, Room LAB003 (Breakout Room LAB006 for networking & refreshments).

Please enter through the Helmore Building and ask at reception.

Anglia Ruskin University Cambridge Campus East Road Cambridge CB1 1PT

Get further information on travelling to the university.

http://www.anglia.ac.uk/ruskin/en/home/your_university/anglia_ruskin_campuses/cambridge_campus/find_cambridge.html

Meeting Location

Everyone is welcome to join us at our chapter meetings.