23C3 - 1.5
23rd Chaos Communication Congress
Who can you trust?
| Events | |
|---|---|
|
Subverting AJAX |
Stefano Di Paola
Software engineer, secure software developer and security researcher. Stefano has great knowledge about web security in LAMP environments. He found some of the most critical vulnerabilities in MYSQL / PHP core products and tries to be always a step further in security research on new application environments. Stefano works as a freelance security and ICT consultant for several italian companies and public administrations.
Master degree in Software Engineering, Stefano Di Paola is a security and ICT consultant for several italian companies and public administrations. He teaches at the University of Florence "Web Security" and "Databases" subjects in graduate and post-graduate courses. He is also Project Manager and developer in several open and closed source projects. He is involved as professional security researcher since 1997, and published several of the major vulnerabilities in MySQL products and PHP core engine (http://www.wisec.it/vulns.php?lang=en). In the last years his research has been focused on OpenSource products paying particular attention on Web security.