Anyone who's built a web-facing Postgres-based app knows how difficult
it is to defend against SQL injection attacks. Regular expressions are
hard to construct in a reliable way, and prepared queries can be slow
and inflexible.
Now, there's a better way! In this presentation,
we'll explore libdejector, a mathematically provably secure way to
prevent SQL injection -- with a simple, user-friendly API for most
scripting languages. We'll also be releasing libdejector for the
Postgres 8.2 series.
Greenplum will kindly be providing pizza and drinks. RSVP ASAP so they know how much to get. :)
I liked the presentation a lot, although I do not know too much in detail about context-free grammars, but the examples about SQL Injection were great, helped me a lot to understand the basic concepts.
I am a beginner in this field, but I am enthusiastic about learning new things.
January 10, 2007
Meredith is an awesome speaker; in addition to having great original ideas, she makes them crystal-clear to others (even when covering abstruse subjects in computational theory). Excellent talk.
January 10, 2007
Join or login to comment.