Keynote: Request Forgery on the Web - SSRF, CSRF and Clickjacking
Explore the intricacies of request forgery on the web in this comprehensive 47-minute keynote presentation by Jim Manico, Founder and CEO of Manicode Security. Delve into various forms of request forgery, including Cross-Site Request Forgery (CSRF), Server-Side Request Forgery (SSRF), and Clickjacking. Learn about real-world attack scenarios, such as the Netflix request forgery and the Capital One case, and discover effective defensive strategies like nonce tokens, SameSite cookies, and the double-cookie submit pattern. Gain valuable insights into protecting web applications from these security threats, including best practices for URL encoding, origin header checks, and X-Frame-Options implementation. Enhance your understanding of web security and equip yourself with the knowledge to build more secure applications in this OWASP Foundation-managed talk.