Скачать с ютуб DeepSec 2013: Auditing Virtual Appliances - An Untapped Source Of 0-days в хорошем качестве

DeepSec 2013: Auditing Virtual Appliances - An Untapped Source Of 0-days

For more information and to download the video visit: http://bit.ly/DS13_info Playlist Deepsec 2013: http://bit.ly/DS13_pl Speaker: Stefan Viehböck Stefan Viehböck of SEC Consult speaks about auditing virtual appliances at DeepSec 2013: "In the past auditing appliances was like auditing embedded devices. Hard to come by, hard to crack open. Since most appliances are now provided in the virtual form factor, they can be easily analyzed. Yet from a security point of view they are still not much different from embedded devices. This talk will discuss the process from getting a root shell on an appliance, assessing the general system hardening posture to finding exploitable vulnerabilities. The state of the art when it comes to application security is discussed based on vulnerabilities in security appliances from F5, Symantec, Sophos and the like. It will be demonstrated that appliances can be the weakest link in a network and cause a huge headache for incident responders."