Execution flow-based web application testing

In this video, Rafal Los, the Security Evangelist at HP, talks about web application security testing and offers a variety of practical tips.

The video was recorded at the OWASP AppSec USA 2010 conference.