{"parse":{"title":"OWASP Israel 2008 Conference Ronen Bachar","pageid":6835,"revid":38698,"text":{"*":"<h2><span class=\"mw-headline\" id=\"Automated_Crawling_.26_Security_Analysis_of_Flash.2FFlex_based_Web_Applications\">Automated Crawling &amp; Security Analysis of Flash/Flex based Web Applications</span><span class=\"mw-editsection\"><span class=\"mw-editsection-bracket\">[</span><a href=\"/index.php?title=OWASP_Israel_2008_Conference_Ronen_Bachar&amp;veaction=edit&amp;vesection=1\" title=\"Edit section: Automated Crawling &amp; Security Analysis of Flash/Flex based Web Applications\" class=\"mw-editsection-visualeditor\">edit</a><span class=\"mw-editsection-divider\"> | </span><a href=\"/index.php?title=OWASP_Israel_2008_Conference_Ronen_Bachar&amp;action=edit&amp;section=1\" title=\"Edit section: Automated Crawling &amp; Security Analysis of Flash/Flex based Web Applications\">edit source</a><span class=\"mw-editsection-bracket\">]</span></span></h2>\n<p>The move to web 2.0 and RIA (Rich Internet Applications) has presented new obstacles for automated web application scanners and crawlers. Specifically, the ability to automatically crawl Flash/Flex based applications and to analyze AMF traffic (proprietary Adobe binary message format) for security vulnerabilities. This presentation will discuss the following subjects - \n</p>\n<ol><li> Introduction to Flash/Flex applications </li>\n<li> High level description of the AMF protocol and its usage </li>\n<li> Automated Flash Testing Challenges (Crawling &amp; Testing) </li>\n<li> Overview of security risks in Flash/Flex applications </li></ol>\n<p>Note: while this presentation is not product specific, it comes to show the current problems of automated security solutions, and will show the implementation that was done in IBM/Watchfire AppScan as a possible solution. We do not plan to pitch the product explicitly.\n</p>\n<h2><span class=\"mw-headline\" id=\"Bio\">Bio</span><span class=\"mw-editsection\"><span class=\"mw-editsection-bracket\">[</span><a href=\"/index.php?title=OWASP_Israel_2008_Conference_Ronen_Bachar&amp;veaction=edit&amp;vesection=2\" title=\"Edit section: Bio\" class=\"mw-editsection-visualeditor\">edit</a><span class=\"mw-editsection-divider\"> | </span><a href=\"/index.php?title=OWASP_Israel_2008_Conference_Ronen_Bachar&amp;action=edit&amp;section=2\" title=\"Edit section: Bio\">edit source</a><span class=\"mw-editsection-bracket\">]</span></span></h2>\n<p>I have been working at Watchfire since 2004 . I'm a team leader for AppScan for the past 2.5 years and manage Flash Crawling project,  C++ developer ( 1.5 years). SW engineer and team leader at Network Privacy (  4 years). SW and HW developer at Elisra. I  graduated  Computer Science and Math from the Open University.\n</p>\n<!-- \nNewPP limit report\nCached time: 20261103192751\nCache expiry: 86400\nDynamic content: false\nCPU time usage: 0.002 seconds\nReal time usage: 0.002 seconds\nPreprocessor visited node count: 6/1000000\nPreprocessor generated node count: 12/1000000\nPost\u2010expand include size: 0/2097152 bytes\nTemplate argument size: 0/2097152 bytes\nHighest expansion depth: 2/40\nExpensive parser function count: 0/100\n-->\n\n<!-- \nTransclusion expansion time report (%,ms,calls,template)\n100.00%    0.000      1 - -total\n-->\n\n<!-- Saved in parser cache with key wiki:pcache:idhash:6835-0!*!*!!*!*!* and timestamp 20261103192751 and revision id 38698\n -->\n"},"langlinks":[],"categories":[],"links":[],"templates":[],"images":[],"externallinks":[],"sections":[{"toclevel":1,"level":"2","line":"Automated Crawling & Security Analysis of Flash/Flex based Web Applications","number":"1","index":"1","fromtitle":"OWASP_Israel_2008_Conference_Ronen_Bachar","byteoffset":0,"anchor":"Automated_Crawling_.26_Security_Analysis_of_Flash.2FFlex_based_Web_Applications"},{"toclevel":1,"level":"2","line":"Bio","number":"2","index":"2","fromtitle":"OWASP_Israel_2008_Conference_Ronen_Bachar","byteoffset":949,"anchor":"Bio"}],"displaytitle":"OWASP Israel 2008 Conference Ronen Bachar","iwlinks":[],"properties":[]}}