CSRF, the Intranet and You

Causes, Attacks and Countermeasures

Justus Winter and Martin Johns

Playlists: '23c3' videos starting here / audio / related events

A detailed introduction to Cross Site Request Forgery. This talk presents the fundamental cause of this vulnerability class and examples of potential attack consequences. The second half of the talk is devoted to avoiding and countering CSRF: Implementing CSRF proof session handling, transparent retrofitting of legacy applications and methods for client side protection.

Related

Download

Embed

Share:

Tags