Dave Elkins

If you're new here, you may want to subscribe to my RSS feed. Thanks for visiting!

Over the next couple of weeks I am going to start writing about web application security and types of attacks that we as developers must know about and defend our applications against.

The three main types of attacks are:

1. Cross Site Scripting (XSS)
2. Cross Site Request Forgery (CSRF)
3. SQL Injection

These are significant issues and there is a large number of variations on these attacks.  The good news is that there are some very easy steps to take to prevent these attacks and there is a lot of overlap in defending against these attacks.

Stay tuned for more.