Fuzzing101 uvm-reporting-and-mitigation-2011-02-10

UVM: Reporting and Mitigation Ari Takanen, CTO of Codenomicon Feb 10th, 2011

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],About Fuzzing 101 and Codenomicon

About Ari Takanen ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Agenda ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Unknown Vulnerability Management Overview and Phases The Only Means of Catching Zero-Day Vulnerabilities!

Challenges with Vulnerability Management ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Zero-Day Vulnerability ,[object Object],[object Object],[object Object],[object Object],[object Object]

Some Helpful Definitions ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

The Challenge: Unknown Vulnerabilities Are Everywhere

Codenomicon Labs Test Results http://www.codenomicon.com/labs/results

Unknown Vulnerability Management (UVM) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Phase 1: Attack Surface Analysis ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Phase 2: Test ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Phase 3: Report ,[object Object],[object Object],[object Object],[object Object],[object Object]

Phase 4: Mitigate ,[object Object],[object Object],[object Object],[object Object]

Vulnerability Reporting Experiences with Bug Reporting

Security View: Window of Vulnerability SW - under vulnerability analysis SW - after product release SW - after the vulnerability process TIME BUG APPEARS RELEASE BUG FOUND VULN FOUND VULN REPORT VULN FIX AVAIL. PATCH RELEASE ADVISORY RELEASE PATCH INSTALL Zero Exposure Limited Exposure Public Exposure

Vulnerability Reporting Process

Finding and Reporting Problems ,[object Object],[object Object],[object Object],[object Object]

How and To Who Do You Report? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

A Bug Report ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Share Test Environment Details ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Defensics Includes Test Setup Details

Collaboration and Document Sharing ,[object Object],[object Object],[object Object],[object Object]

Best Method for Reproducing with Defensics

PCAPs as Test Documentation ,[object Object],[object Object],[object Object],[object Object],[object Object]

Risk Assessment from Bug Identification

Different Types of Reports ,[object Object]

Remediation Package ,[object Object],[object Object],[object Object]

How to Protect Yourself ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

What to Expect ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Challenges in adopting Fuzzing results with security devices Mitigating Unknown Threats

Challenges with IDS ,[object Object],[object Object],[object Object]

How to Build Good IDS Rules ,[object Object],[object Object],[object Object]

Patch Verification Using Fuzzers ,[object Object],[object Object],[object Object],[object Object]

Conclusions ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Summary of UVM ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Our Book On Fuzzing! ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

More News from Codenomicon ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

PROACTIVE SECURITY AND ROBUSTNESS SOLUTIONS THANK YOU – QUESTIONS? “ Thrill to the excitement of the chase! Stalk bugs with care, methodology, and reason. Build traps for them. .... Testers! Break that software (as you must) and drive it to the ultimate - but don’t enjoy the programmer’s pain.” [from Boris Beizer]

Fuzzing101 uvm-reporting-and-mitigation-2011-02-10

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Fuzzing101 uvm-reporting-and-mitigation-2011-02-10

Similar to Fuzzing101 uvm-reporting-and-mitigation-2011-02-10 (20)

Recently uploaded

Recently uploaded (20)

Fuzzing101 uvm-reporting-and-mitigation-2011-02-10