Secrets and Shadows: Leveraging Big Data for Vulnerability Discovery at Scale

No ratings

Presented at DEFCON 23 by

Bill Demirkapi

When we consider the conventional approaches to vulnerability discovery, be it in software or websites, we tend to confine ourselves to a specific target or platform. In the case of software, we might reverse engineer an application's attack surfaces for untrusted input, aiming to trigger edge cases. For websites, we might enumerate a domain for related assets and seek out unpatched, less defended, or occasionally abandoned resources.