This book constitutes the proceedings of the Iberic Web Application Security Conference, held in Madrid, Spain, in December 2009.