Difference between revisions of "Summit 2011 Working Sessions/Session029"

From OWASP
Jump to: navigation, search
Line 12: Line 12:
 
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2=capabilities of WAFs to protect against CSRF
 
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2=capabilities of WAFs to protect against CSRF
  
| summit_session_attendee_name3 =  
+
| summit_session_attendee_name3 = Ryan Barnett
| summit_session_attendee_email3 =  
+
| summit_session_attendee_email3 = Ryan.Barnett@owasp.org
| summit_session_attendee_company3=
+
| summit_session_attendee_company3=Trustwave's SpiderLabs
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3=
+
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3=discuss how WAFs (ModSecurity) can help mitigate CSRF
  
 
| summit_session_attendee_name4 =  
 
| summit_session_attendee_name4 =  
Line 122: Line 122:
 
| related_project_url_3 = http://knol.google.com/k/preventing-cross-site-request-forgeries-csrf-using-modsecurity#
 
| related_project_url_3 = http://knol.google.com/k/preventing-cross-site-request-forgeries-csrf-using-modsecurity#
  
| related_project_name4 =  
+
| related_project_name4 = Prevent CSRF with ModSecurity v2 (Request Validation Tokens via Content Injection)
| related_project_url_4 =  
+
| related_project_url_4 = http://blog.spiderlabs.com/2011/01/detecting-malice-with-modsecurity-csrf-attacks.html
  
 
| related_project_name5 =  
 
| related_project_name5 =  

Revision as of 12:16, 12 January 2011

Global Summit 2011 Home Page
Global Summit 2011 Tracks

WS. secure coding.jpg Protecting Against CSRF
Please see/use the 'discussion' page for more details about this Working Session
Working Sessions Operational Rules - Please see here the general frame of rules.
WORKING SESSION IDENTIFICATION
Short Work Session Description Examining different ways to build CSRF protection into web applications and web frameworks.
Related Projects (if any)


Email Contacts & Roles Chair
Dan Cornell
Eric Sheridan
Operational Manager
Mailing list
{{{mailing_list}}}
WORKING SESSION SPECIFICS
Objectives

Venue/Date&Time/Model Venue/Room
OWASP Global Summit Portugal 2011
Date & Time


Discussion Model
participants and attendees

WORKING SESSION OPERATIONAL RESOURCES
Projector, whiteboards, markers, Internet connectivity, power

WORKING SESSION ADDITIONAL DETAILS
WORKING SESSION OUTCOMES / DELIVERABLES
Proposed by Working Group Approved by OWASP Board

After the Board Meeting - fill in here.

After the Board Meeting - fill in here.

After the Board Meeting - fill in here.

After the Board Meeting - fill in here.

After the Board Meeting - fill in here.

{{{summit_session_deliverable_name6}}}

After the Board Meeting - fill in here.

{{{summit_session_deliverable_name7}}}

After the Board Meeting - fill in here.

{{{summit_session_deliverable_name8}}}

After the Board Meeting - fill in here.

Working Session Participants

(Add you name by clicking "edit" on the tab on the upper left side of this page)

WORKING SESSION PARTICIPANTS
Name Company Notes & reason for participating, issues to be discussed/addressed



Achim Hoffmann @
sic[!]sec
capabilities of WAFs to protect against CSRF
Ryan Barnett @
Trustwave's SpiderLabs
discuss how WAFs (ModSecurity) can help mitigate CSRF