This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "8th OWASP IL chapter meeting"
(→At Watchfire, Herzliya, Wednesday, September 5th 2007, 17:00) |
(→At Watchfire, Herzliya, Wednesday, September 5th 2007, 17:00) |
||
| Line 1: | Line 1: | ||
== At Watchfire, Herzliya, Wednesday, September 5th 2007, 17:00 == | == At Watchfire, Herzliya, Wednesday, September 5th 2007, 17:00 == | ||
| − | [[Image:OWASP_IL_global_security_week_logo.jpg|left|200px]]The next meeting of OWASP IL, The Israeli Chapter of OWASP, would be held at Watchfire offices in | + | [[Image:OWASP_IL_global_security_week_logo.jpg|left|200px]]The next meeting of OWASP IL, The Israeli Chapter of OWASP, would be held at Watchfire offices in Herzliya on Wed, September 5th at 17:00. Watchfire will also sponsor the meeting. The meeting is part of OWASP Day, a Worldwide OWASP 1 day conferences on Privacy in the 21st Century which is in turn OWASP contribution to the [[http://www.globalsecurityweek.com/ Global Security Week]]. |
The agenda of the meeting is: | The agenda of the meeting is: | ||
| Line 9: | Line 9: | ||
| − | <big>'''15:10 – 15:40 Straight from Blackhat: Dangling | + | <big>'''15:10 – 15:40 Straight from Blackhat: Dangling Pointers'''</big> |
Ofer Shezaf, OWASP IL leader; CTO, [http://www.breach.com Breach Security] | Ofer Shezaf, OWASP IL leader; CTO, [http://www.breach.com Breach Security] | ||
| − | <big>'''15:10 – 15:40 Straight from Blackhat: Dangling | + | <big>'''15:10 – 15:40 Straight from Blackhat: Dangling Pointers'''</big> |
[[Image:OWASP_IL_Sponsor_Watchfire.jpg|right]]Jonathan Afek, Senior Security Researcher, [http://www.watchfire.com Watchfire] | [[Image:OWASP_IL_Sponsor_Watchfire.jpg|right]]Jonathan Afek, Senior Security Researcher, [http://www.watchfire.com Watchfire] | ||
| − | Jonthan will bring to us his acclaimed | + | Jonthan will bring to us his acclaimed Blackhat presentation. Dangling pointers are a common programming error, but even OWASP assumes that this can lead only to crashes and therefore only to denial of service attacks (see [[http://www.owasp.org/index.php/Using_freed_memory OWASP vulnerability guide]]. The research team at Watchfire proved that dangling pointers can be exploited to take control of the vulnerable system, elevating the severity of dangling pointers. |
The presentation will explain the vulnerability and demonstrate a real exploit of the vulnerability using vulnerability in IIS as an example. | The presentation will explain the vulnerability and demonstrate a real exploit of the vulnerability using vulnerability in IIS as an example. | ||
| Line 26: | Line 26: | ||
Iftach Amit, Director Security Research, [http://www.finjan.com Finjan] | Iftach Amit, Director Security Research, [http://www.finjan.com Finjan] | ||
| + | |||
| + | Any web based attack requires a business model in order to spread. As the director of research for Finjan, Iftach monitors the highly successful client based web attack vectors and the community that creates them. In the presentation Iftach will explore advanced browser based attack vectors beyond your day to day XSS. | ||
| + | |||
| + | The presentation will cover the business drivers of client side attack vectors, explore recent examples of such attacks with an eye-opening review of the attacker community and its operation methods, and conclude with a technical discussion of the cat and mouse game between cutting edge solutions and ever advancing attack vectors. | ||
| + | |||
| + | |||
| + | <big>'''15:10 – 15:40 Evasive Crimeware attacks, Business drivers, and Proposed Defense'''</big> | ||
| + | |||
| + | Ofer Shezaf, OWASP IL Leader; CTO, Breach Security, [http://www.breach.com Breach Security] | ||
Any web based attack requires a business model in order to spread. As the director of research for Finjan, Iftach monitors the highly successful client based web attack vectors and the community that creates them. In the presentation Iftach will explore advanced browser based attack vectors beyond your day to day XSS. | Any web based attack requires a business model in order to spread. As the director of research for Finjan, Iftach monitors the highly successful client based web attack vectors and the community that creates them. In the presentation Iftach will explore advanced browser based attack vectors beyond your day to day XSS. | ||
The presentation will cover the business drivers of client side attack vectors, explore recent examples of such attacks with an eye-opening review of the attacker community and its operation methods, and conclude with a technical discussion of the cat and mouse game between cutting edge solutions and ever advancing attack vectors. | The presentation will cover the business drivers of client side attack vectors, explore recent examples of such attacks with an eye-opening review of the attacker community and its operation methods, and conclude with a technical discussion of the cat and mouse game between cutting edge solutions and ever advancing attack vectors. | ||
Revision as of 13:06, 20 August 2007
At Watchfire, Herzliya, Wednesday, September 5th 2007, 17:00
The agenda of the meeting is:
17:00 – 17:15 Gathering and refreshments
15:10 – 15:40 Straight from Blackhat: Dangling Pointers
Ofer Shezaf, OWASP IL leader; CTO, Breach Security
15:10 – 15:40 Straight from Blackhat: Dangling Pointers
Jonthan will bring to us his acclaimed Blackhat presentation. Dangling pointers are a common programming error, but even OWASP assumes that this can lead only to crashes and therefore only to denial of service attacks (see [OWASP vulnerability guide]. The research team at Watchfire proved that dangling pointers can be exploited to take control of the vulnerable system, elevating the severity of dangling pointers.
The presentation will explain the vulnerability and demonstrate a real exploit of the vulnerability using vulnerability in IIS as an example.
15:10 – 15:40 Evasive Crimeware attacks, Business drivers, and Proposed Defense
Iftach Amit, Director Security Research, Finjan
Any web based attack requires a business model in order to spread. As the director of research for Finjan, Iftach monitors the highly successful client based web attack vectors and the community that creates them. In the presentation Iftach will explore advanced browser based attack vectors beyond your day to day XSS.
The presentation will cover the business drivers of client side attack vectors, explore recent examples of such attacks with an eye-opening review of the attacker community and its operation methods, and conclude with a technical discussion of the cat and mouse game between cutting edge solutions and ever advancing attack vectors.
15:10 – 15:40 Evasive Crimeware attacks, Business drivers, and Proposed Defense
Ofer Shezaf, OWASP IL Leader; CTO, Breach Security, Breach Security
Any web based attack requires a business model in order to spread. As the director of research for Finjan, Iftach monitors the highly successful client based web attack vectors and the community that creates them. In the presentation Iftach will explore advanced browser based attack vectors beyond your day to day XSS.
The presentation will cover the business drivers of client side attack vectors, explore recent examples of such attacks with an eye-opening review of the attacker community and its operation methods, and conclude with a technical discussion of the cat and mouse game between cutting edge solutions and ever advancing attack vectors.
