Lecture slides about XML Parser Attacks

All slides in one HTML page

1. XML Parser attacks
2. What is an XML Parser Attack?
3. Main types of attacks
4. (re)definition
5. XXE
6. XXE -- suggested fix
7. XXE -- what can this possibly do to me?
8. XML bombs
9. XML bombs -- how to protect against?
10. Garbage
11. Standards Soup
12. some escaping methods found in the wild...
13. We did not talk about specific applications
14. Keep in mind
15. Thank you!

    ---

    Shlomo Yona (c) 2007. All rights reserved. Monthly meetings of Israeli Perl Mongers. Last update: Tue Apr 17 08:31:57 IDT 2007