Cartoon: Perils of reporting Web site vulnerabilities

	Threat modeling
	The essentials of Web application threat modeling
	How to implement security in Java EE and Java ME
	Application security shouldn't involve duct tape, Band-Aids or bubble gum
	Stop SQL injection attacks on applications
	How to counter XSS attacks
	Breaking the same origin barrier of JavaScript
	Protection against "zero-minute" exploits
	Denial of service and Ajax
	CSRF attack vector with Ajax serialization
	Application security in 2007: What you need to know

	Software security testing and techniques
	The realities of using WAFs for PCI DSS 6.6 compliance
	The realities of PCI DSS 6.6 application code reviews
	Ruby on Rails security audit service available
	Application security careers have bright future
	Secure software measures: Their strengths and limitations
	PCI DSS compliance: Web application firewall or code review?
	Web application security testing basics
	Getting started with Web application misuse cases
	OWASP kicks off Summer of Code 2008
	Video: Classification, detection of application backdoor attacks