Show 032 - An Interview with Jeremiah Grossman

The 32nd episode of The Silver Bullet Security Podcast features founder and Chief Technology Officer of WhiteHat Security, Jeremiah Grossman. Gary and Jeremiah discuss clickjacking, cross-site request forgery, why 50% of web problems can’t be discovered reliably automatically, and which conferences Jeremiah most enjoyed on his 2008 world tour.
- Jeremiah Grossman
- Clickjacking
- Adobe 0-day Browser Exploit
- Cross-Site Request Forgeries: Exploitation and Prevention [PDF]
- Web Spoofing: An Internet Con Game by Edward W. Felten, Dirk Balfanz, Drew Dean, and Dan S. Wallach.
- Web application scan-o-meter
- The “Wall of Fame”


November 14th, 2008 at 12:43 pm
[...] Episode 32 of the Silver Bullet Security Podcast features a chat with Web security guru Jeremiah Grossman. Among other things, we talk about the relationship between Web app security and software security. [...]
November 17th, 2008 at 12:40 pm
My interview with Jeremiah prompted me to write a column about the relationship between Web app security and software security. The result is here:
http://www.informit.com/articles/article.aspx?p=1309290
gem