Dzhengis 93098 ajax - security
Download as PPTX, PDF0 likes542 views
AJAX is a web development technique that allows web pages to be updated asynchronously by exchanging data with a web server behind the scenes, without interfering with the display and behavior of the existing page. While AJAX can improve interactivity, it also introduces some security risks similar to regular web applications, such as cross-site request forgery and malware being introduced through malicious JavaScript code. Developers need to implement authentication, authorization, and data protection to secure AJAX applications and users can help defend themselves using tools like NoScript to block untrusted scripts.
1 of 11
Download to read offline
More Related Content
What's hot (20)
Ad
Viewers also liked (9)
Ad
Similar to Dzhengis 93098 ajax - security (20)
Recently uploaded (20)
Dzhengis 93098 ajax - security
- 2. Cyber Attacks are increasing !!! Why?! Fortunately modern browsers are getting better and better by using AJAX
- 3. • AJAX, is a web development technique for creating interactive web applications.
- 4. Classic web app vs. Ajax web app
- 5. If you know JavaScript, HTML, CSS, and XML, then you need to spend just one hour to start with AJAX ?
- 6. AJAX cannot work independently. It is used in combination with other technologies to create interactive web pages.
- 7. AJAX Security •AJAX-based Web applications use the same server-side security schemes of regular Web applications. •You specify authentication, authorization, and data protection requirements in your web.xml file (declarative) or in your program (programmatic). •AJAX-based Web applications are subject to the same security threats as regular Web applications.
- 8. AJAX Security CSRF –> Cross – Site Request Forgery ATTACKS • See what he/she searched for • Read emails • Steal credit card details through PayPal DEFENSE • Use authentication tokens
- 9. AJAX Security • Hacker can use JavaScript code for inferring server-side weaknesses. • JavaScript code is downloaded from the server and executed at the client and can compromise the client by mal-intended code.
- 10. AJAX Security USEFUL TOOLS Defense •NoScript – Accept scripts only from sites you trust •AltCookies – Accept cookies only from sites you trust •Firebug – Dig deeply into HTML/JAVASCRIPT/CSS AND HTTP
- 11. Mr. Drazhev, Thanks for your time.