May 2008 - Posts

SQL injection in classic ASP
30 May 08 05:05 PM | bryansul | 0 Comments   

In light of the recent wake of SQL injection attacks on ASP sites, I'd like to highlight some relevant resources for learning about and responding to the threat. Bala Neerumalla has written a detailed document for preventing SQL injection in ASP (that Read More...

Filed under: sql injection

Web Application Firewalls in Practice - or - Yes, Jeremiah, Secure Software Does Matter
19 May 08 05:01 PM | bryansul | 2 Comments   

There's been a lot of renewed interest in web application firewalls lately. In the past, I haven't been a huge fan of WAFs - they always seemed to me to be just a band-aid stuck on the sucking chest wound of insecure code. But I bumped into Jeremiah Grossman Read More...

Filed under: waf