ForAllSecure

APRIL 3, 2019

Software security is a global challenge that is slated to grow worse. The application attack surface is growing by 111 billion new lines of software code every year, with newly reported zero-day exploits rising from one-per-week in 2015 to one-per-day by 2021, according to the Application Security Report from Cybersecurity Ventures.

Programming 52

Programming Software Software Research 52

ForAllSecure

APRIL 21, 2023

“Hacker” referred to people who explored the limits of computer technology and found ways to modify or improve computer hardware and software. To ensure that users could access only their own files and programs, the team created a system of passwords that allowed users to log in and access their personal data.

Malware 75

Malware Internet Security Government 75

ForAllSecure

APRIL 19, 2023

It was not a literal time machine, but a way of capturing the software development process by recording intervals and storing them in the close. In the Forbes article I never published, Dan said quote- “The reason that software is so inexpensive, we actually are very good at estimating development time. And software?

Operating Systems 40

Operating Systems System Open Source Applications 40

ForAllSecure

APRIL 3, 2019

Software security is a global challenge that is slated to grow worse. The application attack surface is growing by 111 billion new lines of software code every year, with newly reported zero-day exploits rising from one-per-week in 2015 to one-per-day by 2021, according to the Application Security Report from Cybersecurity Ventures.

Programming 40

Programming Software Software Research 40

ForAllSecure

APRIL 3, 2019

Software security is a global challenge that is slated to grow worse. The application attack surface is growing by 111 billion new lines of software code every year, with newly reported zero-day exploits rising from one-per-week in 2015 to one-per-day by 2021, according to the Application Security Report from Cybersecurity Ventures.

Programming 40

Programming Software Software Research 40

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. No shame in that.

Open Source 52

Open Source Tools Security Software 52

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. No shame in that.

Open Source 52

Open Source Tools Security Software 52

Scott Lowe

DECEMBER 17, 2015

If you’d like to play around with Cumulus Linux but don’t have a compatible hardware switch, Cumulus VX is the answer. It says the the JET (Juniper Extension Toolkit) uses “open application programming interfaces”, but fails to provide any specifics. See here for some of my thoughts on Intel’s RSA following IDF 2014.)

Vmware 60

Vmware Linux Architecture Hardware 60

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. No shame in that.

Open Source 52

Open Source Tools Security Software 52

ForAllSecure

DECEMBER 17, 2021

Jonathan Knudsen from Synopsys joins The Hacker Mind to discuss his presentation at SecTor 2021 on fuzzing message brokers such as RabbitMQ and VerneMQ, both written in Erlang, demonstrating that any type of software in any environment can still be vulnerable. Let's give the software badly formed or invalid inputs. Knudsen: Absolutely.

Open Source 52

Open Source Software Software Applications 52

Scott Lowe

JUNE 22, 2015

Golub introduced this 5-step future last year at DockerCon 2014 and reviews it now to see how much progress has been made. Hykes believes that programming (software) is the biggest innovation multiplier in the world, and launches into a discussion of how making the Internet “programmable” would be the ultimate achievement.

Linux 60

Linux Applications Network Tools 60

ForAllSecure

AUGUST 12, 2019

For years, we've been researching ways we can better identify exploitable vulnerabilities in software. In 2014, DARPA announced a Cyber Grand Challenge. In 2014, they issued a similar question, "Hey, can we build self-driving app security?" You don't want to go through the effort of proving your program is correct.

Open Source 52

Open Source Security Programming Analysis 52

ForAllSecure

AUGUST 12, 2019

For years, we've been researching ways we can better identify exploitable vulnerabilities in software. In 2014, DARPA announced a Cyber Grand Challenge. In 2014, they issued a similar question, "Hey, can we build self-driving app security?" You don't want to go through the effort of proving your program is correct.

Open Source 40

Open Source Security Programming Analysis 40

ForAllSecure

AUGUST 12, 2019

For years, we've been researching ways we can better identify exploitable vulnerabilities in software. In 2014, DARPA announced a Cyber Grand Challenge. In 2014, they issued a similar question, "Hey, can we build self-driving app security?" You don't want to go through the effort of proving your program is correct.

Open Source 40

Open Source Security Programming Analysis 40

ForAllSecure

NOVEMBER 2, 2021

Traditional anti-malware research relies on customer systems but what if a particular malware wasn’t on the same platform as your solution software? But to find that information back in 2014, he had to scan the Internet, the entire internet and that was a very noisy process. Marc-Etienne M.Léveillé billion addresses.

Internet 52

Internet Malware Research Linux 52

ForAllSecure

AUGUST 22, 2020

Vamosi: That's Mike Walker, former program manager for DARPA Cyber Grand challenge in 2015 at DEF CON 23 no less Walker announced the first Cyber Grand Challenge would be held the following year in that same ballroom at the Paris Hotel and Casino in Las Vegas, Nevada. It was still a proof of concept for autonomous program analysis.

System 52

System Research Security Operating Systems 52

ForAllSecure

AUGUST 21, 2020

Vamosi: That's Mike Walker, former program manager for DARPA Cyber Grand challenge in 2015 at DEF CON 23 no less Walker announced the first Cyber Grand Challenge would be held the following year in that same ballroom at the Paris Hotel and Casino in Las Vegas, Nevada. It was still a proof of concept for autonomous program analysis.

System 52

System Research Security Operating Systems 52

ForAllSecure

AUGUST 21, 2020

Vamosi: That's Mike Walker, former program manager for DARPA Cyber Grand challenge in 2015 at DEF CON 23 no less Walker announced the first Cyber Grand Challenge would be held the following year in that same ballroom at the Paris Hotel and Casino in Las Vegas, Nevada. It was still a proof of concept for autonomous program analysis.

System 52

System Research Security Operating Systems 52

ForAllSecure

MAY 13, 2022

And the Xbox One seemed like a higher level software type hacking and I wasn't quite comfortable with that level of software. I moved here at the end of 2014. It's not network security where you can download a spec or code and analyze it on your Linux box. I'll do that probably before I'll even look at the software route.

Engineering 52

Engineering Network Video Energy 52

ForAllSecure

AUGUST 2, 2022

And people are talking about hacking control system tackling PLCs and what we quickly realize is they don't they've never touched to be able to say they have no idea what these control systems are how they work their security researchers, you know that that maybe the firmware or maybe they found a program or something somewhere.

Conference 40

Conference System Security Virtualization 40

ForAllSecure

MARCH 14, 2022

Vamosi: Maybe you remember this: In 2014, researchers Charlie Miller and Chris Valasek succeeded in hacking a Jeep Cherokee while a reporter was driving it on a freeway during rush hour in St Louis, Missouri. And man what a great experience that was DEF CON 22 back in 2014. I can join in, I can follow along.

Airlines 52

Airlines Government Security Conference 52