Homemade vulnerabilities : How your most trusted resources will bring havoc to your digital dream

No ratings

Presented at Atlseccon 2015 by

Gabriel Tremblay

While most high profile security bugs such as Heartbleed and Apple's famous dual goto can cause tremendous harm to your organization, most of them will come with an official fix in the next hours following their release. However, when the security vulnerabilities are inserted in your systems by your own developers or sysadmins they can be exploited for months without raising an alarm. This talk will focus on some pervasive bugs that tends to pop everywhere in the industry these days. We will see how bad PRNG usage, leftover files, incorrect use of strong cryptography and more will usually be found and exploited by criminals and how organizations can detect those hard to spot vulnerabilities over time. Speakers - Solutions Track