Lesser-known Application Vulnerabilities - Which are Costing Companies $$$$

No ratings

Presented at BSidesPittsburg 2017 by

Kevin Cody

Vulnerabilities are expensive, there’s simply no way around it. Whether it be mitigation costs, Penetration Testing fees, auditing, or bug bounties - vulnerabilities and bugs are pricey. While SQLi and XSS are certainly dangerous, this talk will focus on some of the more obscure application vulnerabilities which were identified within apps and services we use every day. This presentation won’t simply stop at introducing these talking points; rather, we will dive into identification, both risk and technical analysis, and finally remediation techniques. The goal of this discussion will be to arm security practitioners, of all skill levels, in better understanding application risks in 2017.