01.02.2014 Views

SBDA “same bug, different app” - Security Assessment

SBDA “same bug, different app” - Security Assessment

SBDA “same bug, different app” - Security Assessment

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

How Can This Be Applied To Research<br />

• As Researchers, What Should We Watch For<br />

Since we have already tested all known Vectors against all<br />

known Targets, we need to watch for;<br />

– New Attack Vectors<br />

– New Common Targets<br />

• Is It Possible To Predict Future Vulnerabilities<br />

Yes!<br />

Things are changing, <strong>bug</strong>s are now fixed before products are<br />

shipped, or are found internally and fixed silently<br />

Still….. History has taught us some valuable lessons<br />

Spot the target that hasn’t had vulnerabilities publicised for most<br />

attack vectors. One will likely be coming<br />

Copyright <strong>Security</strong>-<strong>Assessment</strong>.com 2005

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!