AJAX Security - Douglas Crockford

Published: April 4, 2008, 12:29 a.m.

Security design is an important, but often neglected, component of system design. In this session, Douglas Crockford, creator of Javascript Object Notation, will outline the security issues that must be considered in the architecture of Ajax applications. The design of the browser did not anticipate the needs of multiparty applications. The browser’s security model frustrates useful activities and allows some very dangerous activities. This talk will look at the small set of options before us that will determine the future of the Web. During this session, attendees will: - Learn why effective security is an inherent feature of good design; - Experience a real-time demo of a Ajax client/server system based on sound security principles -See how to apply secure design to rich web applications. Douglas Crockford is a product of the US public school system. A registered voter, he owns his own car. He has developed office automation systems. He did research in games and music at Atari. He was Director of Technology at Lucasfilm. He was Director of New Media at Paramount. He was the founder and CEO of Electric Communities/Communities.com. He was founder and CTO of State Software, where he discovered JSON. He is now an architect at Yahoo!. He is the world’s foremost living authority on JavaScript. Licensed as Creative Commons Attribution-Share Alike 3.0 (http://creativecommons.org/licenses/by-sa/3.0/).