The work of Billy Hoffman, lead security researcher for SPI Dynamics (www.spidynamics.com), which was purchased by Hewlett-Packard last year, has been featured in Wired, Make magazine, Slashdot, G4TechTV, and in various other journals and Web sites. Today though he is in full flow at the inaugural AJAX Security Bootcamp, an all-day deep dive into Web application vulnerabilities being held on Day One of the 5th International AJAXWorld Conference & Expo in New York City.

Before even the first hour of the Bootcamp had passed, Hoffman had given a review of traditional web security and moved on to the intracacies of Resource enumeration attacks, Injection attacks, and session hijacking as well as a step by step walk through of hacking an AJAX travel site.

The intensive, one-day, hands-on training program aims to teach Web developers, Web designers, and other Web professionals how to build secure AJAX applications and demonstrate what the best practices are to mitigate security problems in AJAX apps.