WHEN: Thursday, January 22, 6:00pm US EST (UTC/GMT-5) (What time is that for you? See http://www.timeanddat... which shows the time as US EST and you can choose your city from the list offered to see what time that is in your own timezone.)

MEETING URL: http://experts.acroba...
DURATION: Approx. 1 hour
Meeting will be recorded. URL will be posted after meeting at http://recordings.col...

ABOUT THIS SESSION:

Our 6pm talk on Thursday Jan 22 will be Jason Dean presenting, "Application Security: Beyond SQL Injection".

TOPIC DESCRIPTION:

Surely there is more to this application security stuff than SQL injection. We've put in our so are we secure now? We are going to talk about some of the other threats against our applications. Things like:

• Request Forgeries
  
• Password Security
  
• Cookies
  
• Session Management
  

SQL Injection is only the tip of the security iceberg. We need to be prepared for much more. As hackers become more sophisticated, so must we.

SPEAKER:

Jason Dean is a Web Application Developer for the Minnesota Department of Health. He has worked in web development for both the commercial and government (State and Federal) sectors and has spoken at numerous ColdFusion User Group meetings and at the MN Government IT Symposium. He holds a Bachelor of Science in IT Management from American Military University and is a veteran of the United States Coast Guard.

RECORDING: As always, the meeting will be recorded, and the recording URL will be posted after the meeting at http://recordings.col....

PODCAST/DOWNLOADABLE RECORDINGS:
We will attempt to make this meeting available as a downloadable recording, which will be listed on the recordings page within a few days of the meeting.

LOGGING IN: When you login to the Connect room (the experts.acrobat.com/cfmeetup link above) to view the meeting, PLEASE USE THE "LOGIN AS GUEST" option, and USE YOUR NAME, but do NOT attempt to use your meetup.com username/password. The login screen presented there has no connection to meetup.com. And if you have a real Connect account, don't use that either. Just sign in as a guest. It's just not worthwhile try to add those who have real accounts to the participant list for each meeting. You have no fewer features as a guest as than you would if logging in with your own Connect account. Thanks.

RSVP, but only if coming: We appreciate folks RSVPing if they plan to come (using the link on this email or at the meetup site), though it's not mandatory and it's not a commitment. BTW, no need to RSVP if you can't make it nor even explain why you can't. With nearly 1,500 members, there's really no reason to explain your absence. :-)

FEEDBACK/MEEETING DISCUSSION: We would appreciate your sharing your feedback after the meeting (via the follow-up email sent to members, or via a link on the site). Meetup.com also now offers a meeting-specific discussion area, available on each meeting event page, in addition to the feedback feature. Please feel free to have discussions there about the meeting's topic.

ADD THIS TO YOUR CALENDAR: If you would like to easily add this event to your own personal calendar, please note that the page for the event offers a link (on the right) saying, "Add this meeting to your calendar", which offers links to get calendar downloads for Outlook, iCal, Google, and Yahoo calendars.