2009 Web Security Predictions

A 2009 Zscaler forecast outlining ten web security trends: cloud security moving from hype to rigorous evaluation; mobile browsers becoming mainstream targets for traditional web attacks; emerging risks from client-side storage; mass-impact potential of vulnerable web APIs; growth of architecture-abusing techniques like XSS and clickjacking; shifting browser vulnerability focus toward Chrome and mobile; escalating web-based data leakage driving DLP; the decline of coarse URL filtering in favor of dynamic, page-level controls; demand for granular, policy-based control of web app functionality; and the security implications of opening mobile platforms to third-party apps.