Agenda
• what is Middleware?
• Vendors for Middleware?
• Where it stands in a picture?
• Types of Middleware?
• Vulnerabilities in Middleware?
• Importance of middleware patching?
What is Middleware ?
What is Middleware?
Middleware is the software that connects software components or enterprise applications. Middleware is the
software layer that lies between the operating system and the applications on each side of a distributed
computer network Typically, it supports complex, distributed business software applications.
https://docs.oracle.com/cd/E15523_01/core.1111/e10103/intro.htm#BABEICDD
Servers / Client This is middleware in my understanding.. 
Vendors for Middleware?
Where Middleware stands in picture
M
I
D
D
L
E
W
A
R
E
Where Middleware stands in picture
KERNEL
Network OS Service
Middleware
Distributed Application
Types of Middleware?
OBJECT Oriented Middleware
RPC (remote procedure call)
MOM Message oriented Middleware
Event based Middleware
RPC (remote procedure call)
http://p.motionelements.com/stock-video/nature/me705539-inside-mcdonald-s-restaurant-hd-a0252.jpg
RPC (remote procedure call)
APPLICATION
CALL(function)
CLIENT STUB
marshalling
(network portable format)
RPC RPC
SERVER STUB
unmarshalling
Function execute
and result
PROS
* Distributed application
* can call any function from
anywhere
CONS
• Platform Dependent
• Language Dependent
RPC
RPC call
Live Example RPC
OBJECT Oriented Middleware (ORB)
CORBA The Common Object Request Broker Architecture
OBJECT Oriented Middleware (ORB)
CORBA The Common Object Request Broker Architecture BY OMG Group
PROS
• Platform Independent
• Language Independent
• ORB :- Object request broker
• IIOP :- internet inter operable protocol.
APPLICATION
CALL(function)
CLIENT STUB
ORB ORB
Skeleton
Function execute
and result
IIOP :- internet inter operable protocol.
IDL
Live Example ORB
COM/DCOM
PROS
• MSIDL:- Microsoft IDL
• DCE-RCP :-distributed computing Env-R.
CLIENT
Proxy
COM runtime lib in
windows NT
COM runtime lib in
windows NT
STUB
Function execute
and result
DCE-RPC
Component object module and distributed component Object Module
MSIDL
Enterprise JAVA Bean
JAVA RMI (Remote Method Invocation)
PROS
• Platform Independent
• JAVA RMI .
WEB Browser
WEB APP
RMI registry/ JVM RMI registry/ JVM
JDBC
DATABASE
IDL
RMI-IIOP
Vulnerabilities in Middleware
ISSUES
• OVERFLOWS
• WEB Application TOP 10
• Architecture flow
• Say No to Scanner’s
Importance of middleware patching?
Thank You…! 

Middleware hacking

  • 2.
    Agenda • what isMiddleware? • Vendors for Middleware? • Where it stands in a picture? • Types of Middleware? • Vulnerabilities in Middleware? • Importance of middleware patching?
  • 3.
    What is Middleware? What is Middleware? Middleware is the software that connects software components or enterprise applications. Middleware is the software layer that lies between the operating system and the applications on each side of a distributed computer network Typically, it supports complex, distributed business software applications. https://docs.oracle.com/cd/E15523_01/core.1111/e10103/intro.htm#BABEICDD Servers / Client This is middleware in my understanding.. 
  • 4.
  • 5.
    Where Middleware standsin picture M I D D L E W A R E
  • 6.
    Where Middleware standsin picture KERNEL Network OS Service Middleware Distributed Application
  • 7.
    Types of Middleware? OBJECTOriented Middleware RPC (remote procedure call) MOM Message oriented Middleware Event based Middleware
  • 8.
    RPC (remote procedurecall) http://p.motionelements.com/stock-video/nature/me705539-inside-mcdonald-s-restaurant-hd-a0252.jpg
  • 9.
    RPC (remote procedurecall) APPLICATION CALL(function) CLIENT STUB marshalling (network portable format) RPC RPC SERVER STUB unmarshalling Function execute and result PROS * Distributed application * can call any function from anywhere CONS • Platform Dependent • Language Dependent RPC
  • 10.
  • 11.
    OBJECT Oriented Middleware(ORB) CORBA The Common Object Request Broker Architecture
  • 12.
    OBJECT Oriented Middleware(ORB) CORBA The Common Object Request Broker Architecture BY OMG Group PROS • Platform Independent • Language Independent • ORB :- Object request broker • IIOP :- internet inter operable protocol. APPLICATION CALL(function) CLIENT STUB ORB ORB Skeleton Function execute and result IIOP :- internet inter operable protocol. IDL
  • 13.
  • 14.
    COM/DCOM PROS • MSIDL:- MicrosoftIDL • DCE-RCP :-distributed computing Env-R. CLIENT Proxy COM runtime lib in windows NT COM runtime lib in windows NT STUB Function execute and result DCE-RPC Component object module and distributed component Object Module MSIDL
  • 15.
    Enterprise JAVA Bean JAVARMI (Remote Method Invocation) PROS • Platform Independent • JAVA RMI . WEB Browser WEB APP RMI registry/ JVM RMI registry/ JVM JDBC DATABASE IDL RMI-IIOP
  • 16.
    Vulnerabilities in Middleware ISSUES •OVERFLOWS • WEB Application TOP 10 • Architecture flow • Say No to Scanner’s
  • 17.
  • 18.