×
  • Share
  • Email
  • Embed
  • Like
  • Save
  • Private Content
 

(Updated) Mo' Money Mo' Problems - Making even more money online the black hat way

by Chief Technology Officer at WhiteHat Security on Aug 18, 2009

  • 7,946 views

Sequel to the much acclaimed Get Rich or Die Trying presentation. This time around we're not going to restrict ourselves to the super simple, legal gray area, or even those previously exploited in the ...

Sequel to the much acclaimed Get Rich or Die Trying presentation. This time around we're not going to restrict ourselves to the super simple, legal gray area, or even those previously exploited in the real-world. The theoretical is fast becoming dangerously likely and we can't wait until it becomes a reality for them to be examined.

Many people still mistakenly believe profiting illicitly or causing serious damage on the Web requires elite, ninja-level hacking skills. Nothing could be further from the truth. In fact, given the ever-increasing complexity of Web technology, using sophisticated vulnerability scanners can make the monetization process more difficult, noisy, and arguably less lucrative. While scanners and code reviews can lend themselves to identifying SQL Injection and Cross-Site Scripting, which can lead to significant harm and financial loss, so too can the issues they consistently miss -- business logic flaws.

Business logic flaws, or an oversight in the way a system is designed to work or can be made to work, is one that typically can be gamed in low-tech ways. In the real world, these attacks have lead to between four and nine-figure paydays with nothing more than basic analytical skills required. Furthermore these are attacks that Intrusion Detection Systems (IDS) will miss, Web application firewalls can't block, and Web application vulnerability scanners fail to identify. Attacks so subtle that most organizations will not know they've been hit until a financial audit uncovers a discrepancy, they receive angry customer calls, or when they become headline news.

Statistics

Views

Total Views
7,946
Views on SlideShare
7,922
Embed Views
24

Actions

Likes
0
Downloads
63
Comments
4

2 Embeds 24

http://www.slideshare.net 14
http://websecurity.com.ua 10

Accessibility

Categories

Upload Details

Uploaded via SlideShare as Adobe PDF

Usage Rights

CC Attribution-NonCommercial-NoDerivs LicenseCC Attribution-NonCommercial-NoDerivs LicenseCC Attribution-NonCommercial-NoDerivs License

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel

14 of 4 previous next Post a comment

  • LongWan Long Wan at Baron & Baroness Thank you for your sharing, where can buy the diamond tool? wanlong diamond tools and products: edge cutting blade,edge cutting tools,general edge cutting segment, granite edge cutting blade,grantie cutting tools.diamond cutting blade. 1 year ago
    Are you sure you want to
    Your message goes here
    Processing…
  • LongWan Long Wan at Baron & Baroness I like the look of your article's style, we may be the friend? I am of wanlong diamond tools, we produce: sandstone blades,sandstone diamond tool,sandstone block cutting blade,sandstone cutting tools,sandstone diamond cutting tools,sandstone blades,sandstone diamond tools,sandstone cutting blades,sandstone segment,diamond cutting segement. 1 year ago
    Are you sure you want to
    Your message goes here
    Processing…
  • aprilkate123 aprilkate123 1 application. 100's of trucking companies! Visit us at http://jobsfortruckers.com 3 years ago
    Are you sure you want to
    Your message goes here
    Processing…
  • markchang Mark Chang, Retiree at Home Very clear presentation with good graphing.

    Mark Chang, www.free-ringtones.co.in/ www.free-ringtones-for-sprint.com/
    3 years ago
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment

(Updated) Mo' Money Mo' Problems - Making even more money online the black hat way (Updated) Mo' Money Mo' Problems - Making even more money online the black hat way Presentation Transcript