+1 -1 +15
Vote on this proposal

The wicked JSON

by Nafeez Ahamed (speaking)

Section
Default
Session type
Lecture
Technical level
Advanced

Objective

The objective of the talk will be making secure JSON communication and the proper way of handling the same. Most of the attacks using improperly coded JSON, are shown and the methods to overcome them are addressed.

Description

Owing to its fast nature, JSON is being rapidly adopted by all kinds of developers nowadays as a data-interchange format. Developers often make the mistake of sending JSON the naive way, and also improperly handling them in the Client side code.

An attacker can make use of this to target the website and he can do cross-domain content extraction, XSS and some more attacks.

Speaker bio

Security Researcher and speaker at Security Conferences.