OWASP Toronto | The Current State of Insecure Deserialization Vulnerabilities
Details
*** There is a 40 person limit for the in-person meetup! Please RSVP separately here (https://forms.gle/x1LJBJWQH53gYHnR8) if you plan to attend in person! ***
TALK
The Current State of Insecure Deserialization Vulnerabilities
Summary:
Insecure Deserialization has proven to be a fruitful vector for remote code execution attacks in recent years. Research into this vulnerability class has evolved, leading to a variety of attack methods and tools, which aim to bypass the growing number of mitigations attempted. In this talk, I'll review some common attack methods used in various languages and environments, and review some case studies of recently patched vulnerabilities I found interesting.
Presenter:
Guy Lederfein
* Vulnerability Researcher @ Trend Micro Security Research
* Providing analysis and detection guidance for N-day vulnerabilities disclosed in popular software used in enterprise environments.
* Background in Penetration Testing
* Web Applications, Network, Mobile, etc.
* B.Sc. in Computer Engineering
