The following list of topics are relevant for IBWAS09 (if you think your work is related to application security, but if doesn’t fit on any of these topics, please feel free to submit your paper indicating the topic that would fit your paper the best):
Secure application development
Security of service oriented architectures
Threat modelling of web applications
Cloud computing security
Web applications vulnerabilities and analysis
Countermeasures for web application vulnerabilities
Secure coding techniques
Platform or language security features that help secure web applications
Secure database usage in web applications
Access control in web applications
Web services security
Browser security
Privacy in web applications
Standards, certifications and security evaluation criteria for web applications