It will provide an overview of web application security. It will explore techniques and tools for application level auditing focusing on both known and unknown vulnerabilities and business logic unique to each site. The participant will leave this session with a tested game plan for identifying web application vulnerabilities and for ensuring your organization's web sites are safe. In the Internet world, security is the enabler for achieving corporate Internet objectives. The risks to companies who are opening up their environment to the Internet is that weak security can impact operating productivity, corporate reputation, information confidentiality and economic results.
Web portals act as the entry to an organization's valuable information assets.
Web portal security products will become increasingly important as organizations web-enable information systems and allow external users access to the organizations' critical data. This session will provide an understanding of the status of web portals in the marketplace. It will discuss the risks and control objectives associated with web portals. It will examine the current products that provide security for web portals to determine their limitations and approaches to implement them. WAP is used to enable a host of devices and environments.