This seminar presentation discusses the Heartbleed vulnerability, which affected the OpenSSL implementation of the SSL/TLS protocols. It notes that many Android devices and Linux browsers were likely vulnerable, while iOS, Mac OS X, and browsers using Microsoft's SSL implementation were not. The presentation recommends continuous monitoring with IDS/IPS devices and vulnerability scans to detect any exploits of Heartbleed, and lists other potentially vulnerable devices like IP phones, routers, medical equipment and smart TVs.

1. A SEMINAR PRESENTATION ON
BY :HEMANT MITAL

3. 4/02/15

4. 4/02/15

5. 4/02/15

14. 4/02/15

15. What else?
●
Most Android devices are vulnerable.
●
iOS and Mac OSX are not vulnerable.
-but some 3rd
party iOS apps are.
●
Most Linux browsers are probably
vulnerable.

16. WHAT ELSE ?
• IP phones
• Routers
• Medical devices
• Smart TV sets
• embedded devices

17. Safe(r) Browsers
●
Firefox, Chrome, and IE (on Windows) use
the Microsoft implementation of SSL not
OpenSSL.
●
Internet Informations Server/Services (IIS)
are not vulnerable.

18. What is Information Security
doing?
●
Continuous monitoring for this vulnerability
with both IDS and IPS devices.
●
Vulnerability scans. - not as effective since
it's a snapshot in time but a good starting
point.