Black Hat Extrusion Detection Encore: Next Wednesday, OWASP Chicago
Thomas Ptacek | August 27th, 2007 | Filed Under: Gatherings, Uncategorized
Come see Eric Monti reprise our Black Hat talk on Extrusion Detection and Content Management and Filtering systems. Next Wednesday, September 5th, at Chicago OWASP. From the abstract:
Some “Extrusion Detections” products rely on network gateway IPS/IDS approaches, whereas others work in a way more closely resembling host-based IDS/IPS. The main difference is that instead of detecting/preventing malicious information from entering a company’s perimeter, they focus on keeping assets inside.
We’ve been evaluating a number of products in this space and have run across a large number of vulnerabilities. They range from improper evidence handling, to inherent design issues, all the way to complete compromise of an enterprise, using the Extrusion Detection framework itself as the vehicle.
Capsule summary: Eric and I got a chance to test several market-leading “Extrusion Detectors”. None of them emerged unscathed. Eric will talk about the techniques and methods we used to pick these black-box systems apart, and what types of vulnerabilities we found.
Chicago OWASP is open to all comers, but you do need to RSVP to Jason Witty (jason at wittys dot com) sometime before next Tuesday. Meetings are held in the LaSalle Bank building on Madison. Check the OWASP page for more details. See you there!
Add New Comment
Viewing 4 Comments
Thanks. Your comment is awaiting approval by a moderator.
Do you already have an account? Log in and claim this comment.
Do you already have an account? Log in and claim this comment.
Do you already have an account? Log in and claim this comment.
Do you already have an account? Log in and claim this comment.
Do you already have an account? Log in and claim this comment.
Add New Comment
Trackbacks