FW: Security presentation from OracleWorld

From: MacGregor, Ian A. <ian_at_SLAC.Stanford.EDU>
Date: Wed, 01 Oct 2003 14:19:27 -0800
Message-ID: <F001.005D1B6C.20031001141927@fatcity.com>

Our security folks just sent me this.

Ian MacGregor
Stanford Linear Accelerator Center
ian_at_slac.stanford.edu

-----Original Message-----
Sent: Tuesday, September 30, 2003 1:35 PM To: NTBUGTRAQ_at_LISTSERV.NTBUGTRAQ.COM

I've posted the presentation I gave at OracleWorld last month. This presentation covers writing secure code in Oracle databases and Oracle Application Server. The topics covered include:

Managing state
Query parameters
Hidden fields
Cookies
Cross-site scripting
SQL Injection
PL/SQL Injection
Buffer overflows in EXTPROC
Resources

You can download the presentation at
http://www.appsecinc.com/techdocs/presentations.html under the heading "Writing Secure Code in Oracle Presentation".

I welcome comments and criticisms.

Regards,
Aaron

---

Aaron C. Newman
CTO/Founder
Application Security, Inc.
www.appsecinc.com
Phone: 212-420-9270
Fax: 212-420-9680
- Securing Business by Securing Enterprise Applications -

• Attend AppSecInc's FREE Webinars **
  - Learn about the latest Database Attacks!
  
  • Learn about the latest data security regulations!

Reserve Your Spot Today at:
http://www.appsecinc.com/webinar

---

Are You "Certifiable"? Summer's Hottest Certification Just Got HOTTER!

With a growth rate exceeding 110%, the TICSA security practitioner certification is one of the hottest IT credentials available. And now, for a limited time, you can save 33% off of the TICSA certification exam! To learn more about the TICSA certification, and to register as a TICSA candidate online, just go to

http://www.trusecure.com/offer/s0100/

---

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: MacGregor, Ian A.
  INET: ian_at_SLAC.Stanford.EDU

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Received on Wed Oct 01 2003 - 17:19:27 CDT