'Attack surface' diaporamas de présentation

Fundamentals of Secure Development

Fundamentals of Secure Development. Dave Weinstein Security Development Engineer Microsoft. What is Secure Development?. A process, not a magic bullet or secret technology. What is Secure Development?. Security Development Lifecycle Secure by Design

1.23k views • 81 slides

Harder, Better, Faster, Stronger

Harder, Better, Faster, Stronger. Semi-Auto Vulnerability Research. Professional Vulnerability Research. Finding bugs is not the problem Fuzzing works Microsoft found over 1800 bugs in Office 2010

922 views • 69 slides

Measuring Relative Attack Surfaces

Measuring Relative Attack Surfaces. Jeannette Wing School of Computer Science Carnegie Mellon University. Joint with Mike Howard and Jon Pincus, Microsoft Corporation. Motivation. How do we measure progress?

506 views • 41 slides

Security in a Virtual World

Security in a Virtual World. Kai Axford, CISSP, MCSE Sr. Security Strategist, Trustworthy Computing Group Microsoft Corporation kaiax@microsoft.com http://blogs.technet.com/kaiaxford. Why should I care?.

456 views • 39 slides

548 views • 36 slides

Web 2.0 Security

Web 2.0 Security. James Walden Northern Kentucky University. Speaker Biography. Assistant Professor at NKU Graduate certificate in Secure Software Eng. Minors in Infosec and Forensics. Papers & workshops in software security. Contributor to SANS/CWE Top 25 programming flaws.

460 views • 36 slides

We have you by the gadgets

We have you by the gadgets. Hitting your OS below the belt. Thank you for waking up ?. Legal Notice Our opinion is our own. It DOES NOT IN ANY WAY represent the view of our employers. Agenda. Who we are What are Gadgets A little bit of history Why this matters How to develop gadgets

491 views • 32 slides

Best Practices Revealed: A Blueprint for a Modern Enterprise Security Program

Best Practices Revealed: A Blueprint for a Modern Enterprise Security Program J. Daniel Culpepper Director of Sales Engineering, RiskSense, Inc. Cyber Security State of the Market.

668 views • 31 slides

Measuring Relative Attack Surfaces

427 views • 29 slides

Agility with Security Mitigations in Windows 10

Agility with Security Mitigations in Windows 10. Swamy Shivaganga Nagaraju, Vulnerabilities and Mitigations Team, Microsoft Security Response Center (MSRC) Nullcon - March, 2017. Agenda. Windows release cadence. Pre & post Windows 10 cadence. Security mitigations.

462 views • 28 slides

Building Trusted Path on Untrusted Device Drivers for M obile Devices

Building Trusted Path on Untrusted Device Drivers for M obile Devices. Wenhao Li , Mingyang Ma, Jinchen Han, Yubin Xia, Bingyu Zang , Cheng-Kang Chu, Tieyan Li SJTU, Fudan and Huawei Technologies. Motivation. The population of mobile users grows dramatically So is the malware!.

537 views • 28 slides

Nozzle: A Defense Against Heap-spraying Code Injection Attacks

443 views • 28 slides

The Evolution of Endpoint Security: Detecting and Responding to Malware Across the Kill Chain

The Evolution of Endpoint Security: Detecting and Responding to Malware Across the Kill Chain. Mary Ann Fitzsimmons Regional Director. Significant Data Breaches in Last Twelve Months. Jan. Feb. July. Dec. Nov. Aug. Oct. Sept. March. June. May. April.

465 views • 27 slides

The Role of Indirection and Diffusion in DDoS Defense

335 views • 23 slides

Security and Privacy in Cloud Computing

Security and Privacy in Cloud Computing. Ragib Hasan University of Alabama at Birmingham CS 491/691/791 Fall 2013. Lecture 3 09/03/2013. Attacks and Attack Surfaces. Goal: Examine attack surfaces in a cloud Learn about novel attacks on clouds Recommended reading (no reviews)

669 views • 23 slides

A Research Agenda for Scientific Foundations of Security David Evans University of Virginia NITRD Post-Oakland Program

324 views • 21 slides

The Evolution of Endpoint Security: Detecting and Responding to Malware Across the Kill Chain

The Evolution of Endpoint Security: Detecting and Responding to Malware Across the Kill Chain. David Flournoy Bit9 Mid-Atlantic Regional Manager. Significant Data Breaches in Last Twelve Months. Jan. Feb. July. Dec. Nov. Aug. Oct. Sept. March. June. May. April.

359 views • 21 slides

An Attack Surface Metric

An Attack Surface Metric. Pratyusa K. Manadhata Jeannette M. Wing Carnegie Mellon University {pratyus, wing}@cs.cmu.edu. 700. 600. 500. 400. 300. 200. 100. 0. Windows NT 4. Windows 2000. Windows Server 2003. RASQ. RASQ with IIS enabled. RASQ with IIS Lockdown.

301 views • 15 slides

Empirical Study on Attack Surface Mozilla Firefox Case Study

247 views • 9 slides

Reverse Engineering Thick-clients

Reverse Engineering Thick-clients. Steven C. Markey , MSIS, PMP, CISSP, CIPP/US, CISM, CISA, STS-EV, CCSK Principal, nControl, LLC Adjunct Professor. Reverse Engineering Thick-clients. Agenda Thick-client Overview Attack Surface Reverse Engineering Thick-clients.

278 views • 7 slides