Understanding and Mitigating Low Level Vulnerabilities

No ratings

Presented at RochesterSecuritySummit 2014 by

Jared Demott

A decade+ ago, attackers would exploit a vulnerable server in the DMZ and use that foothold to pivot into your enterprise. That still could happen, but now it’s common for attackers to host malicious servers. By tricking victims into visiting a website, exploits can be launched against the browser. Attackers no longer need to pivot out of an isolated DMZ, they are already on the inside. Stealing corporate secrets is the next step. But have you ever wondered how we got into this situation? What architectural decisions have been made which allow attackers to be able to exploit memory corruption bugs, such as buffer overflows? And what are computer chip and operating system vendors doing to limit such obviously invalid behavior? Join Dr. DeMott as he walks through the mind of exploit writers and what defenders can do to mitigate cyber onslaught.