Send a suggestion!

We're building a brand new version of the site, and we'd love to hear your ideas

Members

Technology Zones

IBM Learning Center

Articles

Hosted By

MaximumASP

Info

Bryan Sullivan Profile

photo Bryan Sullivan (Bryan_Sullivan)
27 Sep 2006
Atlanta United States
Development Manager
http://www.spidynamics.com

Bryan Sullivan is a development manager at SPI Dynamics, a Web application security products company. Bryan manages the DevInspect and QAInspect Web security products, which help programmers maintain application security throughout the development and testing process. He has a bachelor's degree in mathematics from Georgia Tech and 12 years of experience in the information technology industry. Bryan is currently coauthoring a book with noted security expert Billy Hoffman on Ajax security, which will be published in summer 2007 by Addison-Wesley.

This user has contributed 4 articles, 0 code samples and posted 0 messages in our discussion forums.

Technology Interests

      Articles & Tutorials

    • Top 10 Application Security Vulnerabilities in Web.config Files - Part Two

      by Bryan_Sullivan

      In this second part of a two-part series, you will learn about application security issues related to authentication and authorization, as well as five vulnerabilities commonly found in ASP.NET web-based applications. Additionally, find out how to keep configuration files from being unintentionally modified by uninformed programmers or administrators, as well as why it is critical to never rely on default setting values.. Read full article

    • Top 10 Application Security Vulnerabilities in Web.config Files - Part One

      by Bryan_Sullivan

      In part one of this two part article, you will learn about five of the top ten “worst offenders” of misconfigurations of application security that can cause overall problems for ASP.NET Web-based applications. Learn more about how to secure the Web.config files of an ASP.NET application.. Read full article

    • Testing for Security in the Age of Ajax Programming

      by Bryan_Sullivan

      Ajax programming, which allows a web page to refresh a small portion of its data from a web server, is an exciting technology that has recently been introduced. However, this type of programming can also leave applications open to SQL injection and similar attacks. Learn more about Ajax programming and what it means in terms of security.. Read full article

    • Malicious Code Injection: It’s Not Just for SQL Anymore

      by Bryan_Sullivan

      While many developers are aware of the threats posed by malicious code, and by SQL injection attacks in particular, there are other forms of code injection that are equally dangerous. Learn more about XPath injection, LDAP injection, and command execution injection and view examples of each type of attack.. Read full article