| HostMan.biz - WebSite Hosting Directory - Web Host Reviews - Hosting Companies - Web Hosts Plans | |||
| WebSite Hosting | UK Hosting | Best Hosting | Web Design | Dedicated Servers | Web Hosting Canada | Business Address | Webmaster | |||
![]() | |||
|
| |||
| HostMan.biz - news | |||
|
SPI Dynamics to Keynote at Black Hat 2006.
2006-07-28, HostMan.biz S.P.I. Dynamics, Inc. announced three of the company's leading researchers will highlight the latest hacking trends at the upcoming Black Hat 2006 in Las Vegas, Nevada, August 2 and 3, 2006. This year's Black Hat includes a significant number of talks focused on Web application security - a clear indicator of the impact Web applications are having on future trends in security. Bob Auger, Research & Development Engineer for SPI Dynamics, will present alongside the Company's Co-founder and CTO, Caleb Sima, on the use of RSS and Atom feeds as methods of hacking client systems. The talk is titled "Zero Day Subscriptions: Using RSS and Atom Feeds as Attack Delivery Systems," and is scheduled during the Black Hat conference Thursday, August 3rd from 9:00 a.m. until 9:50 a.m. PT. RSS (Really Simple Syndication) is an XML format designed for sharing Web content. The talk will focus on: - How Web-based feeds (RSS and Atom formats) can be used as an attacker vector. - New vulnerabilities and concepts discovered through SPI Dynamics' SPI Labs' research. - How feeds can be used as hacking vectors for known vulnerability deployment, as well as for unknown, zero-day attacks. - Expansion of Cross-Site Scripting (XSS) to perform more malicious attacks, and, in some cases, command execution. - How hacking that utilizes feeds can exploit large scale audiences. - Exploitation of Web sites that provide content from feeds on their sites. - The impact of an application vulnerable to attacks via Web feeds. In addition Billy Hoffman, Lead SPI Labs Research Engineer, will present two talks at Black Hat focused on hacking, the latest in Ajax threats, and Web application worms and viruses. Mr. Hoffman's first talk entitled, "Ajax (in)security" scheduled for Thursday, August 3rd from 11:15 a.m. until 12:30 p.m. PT, will comprehensively discuss the fundamental security issues of Ajax, which include browser/server interaction issues, application design issues, vulnerabilities in work-arounds like Ajax bridges, and how the hype surrounding Web 2.0 applications is actually increasing security risk. The discussion will examine the different hacking techniques used against Ajax applications, and how to properly design an Ajax application to avoid these security issues. It will also include a demonstration of how to secure existing applications. Mr. Hoffman, will also present "Analysis of Web Application Worms and Viruses" scheduled at the Black Hat conference Thursday, August 3rd from 4:45 p.m. until 6:00 p.m. PT. The presentation will analyze the scope of new application-level hacking threats by examining how Web worms and viruses operate with regard to propagation methods, execution paths, payload threats and limitations, and design features. Mr. Hoffman will closely dissect source code of recent Web application worms such as the Perl.Sanity worm and the MySpace.com virus to better understand how these programs function in the wild, as well as take a look at hypothetical situations of future worm programs. The talk will conclude with guidelines for implementing Web application security pre and post production. In addition, SPI Dynamics will host a book signing at Black Hat for Caleb Sima's publishing debut in the newly released book titled, Hacking Exposed Web Applications: Web Security Secrets & Solutions, Second Edition, published by McGraw-Hill/Osborne and co-authored by renowned Web application security specialists Joel Scambray and Mike Shema, at the company's Black Hat booth on Wednesday, August 2nd from 6:00 p.m. until 6:30 p.m. PT. |
|||
|
Hosting Glossary ASP (Active Server Pages) | Auto Responder | Bandwidth | CGI, CGI-BIN | Colocation | Domain Name | E-mail | FTP | POP3 E-mail | IP Address | Name Server | Server Side Includes (SSI) | Spam (Spamming) | |
| Webmaster Resources |
| New York | Web Hosting Forums | Review Hosting | Web Hosting Blog | Web Hosting | Hosting in Europe |
| Unix Hosting | Windows Hosting | Budged Hosting | Reseller Hosting | Shared Hosting | Decicated Hosting |
|
Webmaster Resources | Contact Us |
| © HostMan.biz, Hosting Directory since 2003 |