Acunetix Web Vulnerability Demo
Speaker: Simon Herring, CISSP - Founder & CTO, Jacadis
Format: WebEx and Teleconference *space is limited
Date: Every Tuesday
Time: 1:00PM ET
Duration: 45 minutes
Cost: FREE!
In December 2008, a glaring Cross-Site Scripting (XSS) hole was discovered in an American Express website. In addition to exposing Amex users' cookies, this XSS weakness could have provided a trivial way to create counterfeit pages for phishing and injecting malicious code using an iframe. Yet another business giant shows us how even the best equipped and brightest IT shops can miss an obvious web application flaw.
But who’s really at-risk? To the pleasure of cyber-criminals, many security professionals, technical managers, and executives falsely believe only high value sites like Amex, Chase, and major online retailers are targeted by data thieves. The rampantly successful DANMEC/ASPROX SQL Injection worm, and its many variants, revealed the error in this belief. Do not be mistaken – even if you have no sensitive data to steal, Internet crooks will use your site to distribute malicious code to hundreds of thousands, if not millions of Internet users.
Perhaps you’re compliant with PCI 6.6, HIPAA, SOX, or GLBA? But as Amex demonstrated, “Compliant” does not mean “secure”, not even for a founding member of the PCI Standards Council. And waiting for an annual audit, or the scrutiny of a concerned customer, to tell you you’re exposed is no way to keep the trust of your clients. There’s simply too much at stake; you deserve better and so do your clients.
In this 45 minute Webcast, you’ll learn:
- How Cyberthieves can use your site to distribute malware to your customers and visitors.
- How to rapidly and accurately identify web vulnerabilities without being a "security expert".
- How to rise above “compliance” without consuming your diminishing security budget on complex enterprise solutions that over-commit and under-deliver.
To register for this Demo, please complete the form below.
Registration Information