Title: Rich Internet Application (RIA) – Security and Framework

 A Rich Internet Application (RIA) is a web application that has many of the characteristics of desktop applications, typically delivered either by way of a site-specific browser, via a browser plug-in, independent sandboxes, or virtual machines. Adobe Flash, Java, and Microsoft Silverlight are currently the three most common platforms, with penetration rates around 99%, 80%, and 54% respectively (as of July 2010). Although new web standards have emerged, they still use the principles behind RIAs.

Rich Internet applications (RIAs) offer a rich, engaging experience that improves user satisfaction and increases productivity. Using the broad reach of the Internet, RIAs can be deployed across browsers and desktops.

This presentation will discuss the following:

     -           Why RIA?

    -           Flex Overview

     -           Silverlight Overview

     -           Flex Security Features

     -           Silverlight Security Features

     -           What are some of the Security Risks

     -           How to mitigate these Risks

     -           Demo

    -           References

  Speaker:

Fares Alraie
Software Security Specialist, Royal Bank of Canada

 For the past two years Fares has been working on putting a software security specialist team at RBC that handles all type of application security testing.  Utilizing his previous experience as software technical specialist, he has been engaged in reviewing most of the new frameworks and technologies that the enterprise wants to adopt. With combination of strong background in the technical world and the security world Fares has contributed a number of white papers, created and delivered workshops and Presentation for developers and Security personnel that cover the security angle of all the new emerging technologies.

 Fares has also been involved in:

§  White box testing (i.e security source code review)

§  Black and gray box testing (i.e Pen Testing)

Fares has been working in the development world for the past 12 years and then moved on to the application security world.  His goal is to simplify application security for development communities in order to increase the speed of adopting application security in the development life cycle, as well as change the approach to application security for more of pro-active rather than re-active.

Registration: