IBM Injects Security Into Mashups

<a href="http://www.infoworld.com/article/08/03/12/ibm-smash-mashups_1.html">InfoWorld</a>

Jim Manico, OWASP Global Board Member

March 13, 2008

1 Min Read

While mashups offer a handy way for companies to pull data from multiple source types into a unified view, all that sharing also carries security risks in the form of spreading malicious code. And that's not a risk most SMBs can afford to take.IBM hopes to reduce that fear with new technology called SMash (secure mashup), which lets information from different sources communicate with each other, but keeps code and data from each of the sources separate. As part of the initiative, IBM is also donating the technology to the OpenAjax Alliance -- an organization that promotes AJAX interoperability -- to help spur widespread adoption of Web 2.0 technologies.

"Web 2.0 is fundamentally about empowering people, and has created a societal shift in the way we organize, access and use information," said Rod Smith, IBM Fellow & VP, in a statement. "Security concerns can't be a complete inhibitor or clients lose out on the immense benefit mashups bring."InfoWorld

Read more about:

2008

About the Author(s)

Jim Manico

OWASP Global Board Member

Jim Manico is a Global Board Member for the OWASP foundation where he helps drive the strategic vision for the organization. OWASP's mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks. OWASP's AppSecUSA<https://2015.appsecusa.org/c/> conferences represent the nonprofit's largest outreach efforts to advance its mission of spreading security knowledge, for more information and to register, see here<https://2015.appsecusa.org/c/?page_id=534>. Jim is also the founder of Manicode Security where he trains software developers on secure coding and security engineering. He has a 18 year history building software as a developer and architect. Jim is a frequent speaker on secure software practices and is a member of the JavaOne rockstar speaker community. He is the author of Iron-Clad Java: Building Secure Web Applications<http://www.amazon.com/Iron-Clad-Java-Building-Secure-Applications/dp/0071835881> from McGraw-Hill and founder of Brakeman Pro. Investor/Advisor for Signal Sciences.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights