I had a great time last Wednesday speaking at the Minnesota Government Information Technology Symposium in St. Paul. I'm really glad they gave me the opportunity to speak about Application Security. I was very pleased with the turn out. I believe I had about 70-75 people in attendance.

My presentation ran about 2 hours. We covered a wide range of basic security topics:

• Assets, vulnerabilities, threats, and counter measures
• SQL Injection
• Cross-Site Scripting(XSS)
• Request Forgeries
• Password Security

For those that missed it, I am attaching my slides to this post.

I want to thank the organizers of the event for putting this on and allowing me to speak. I got a lot out of the symposium and enjoyed most of the presentations I attended. It also helped open my eyes, more, to a problem that I think is being overlooked in much of web development world. Accessibility. You can expect some more blog posts from me in the future about accessibility.

This Wednesday (12/17/2008), I will be speaking at the Minnesota Government Information Technology Symposium in St. Paul, MN.

From their website:

"As the premier IT event for Minnesota's public sector, the IT Symposium typically draws over 1,300 people! With its variety of content and sessions, the event is for anyone involved with or interested in information technology from ALL units of government and education..."

[More]

Tomorrow, October 21st, 2008, is the OWASP & FLOSS Application Security Mini-Conference 2008.

The Open Web Application Security Project (OWASP) is a worldwide free and open community focused on improving the security of application software. - OWASP Website

[More]