Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ......

51
Yaniv Simsolo CISSP

Transcript of Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ......

Page 1: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

Yaniv Simsolo

CISSP

Page 2: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• A denial-of-service attack (DoS attack) is an attempt to make

a machine or network resource unavailable to its intended users.

(Wikipedia)

Page 3: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• A distributed denial of service attack (DDoS)

occurs when multiple systems flood the

bandwidth or resources of a targeted system,

usually one or more web servers. (Wikipedia)

Page 4: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• DOS goals: make a machine or network resource unavailable to its intended users

• It is possible to create a situation in which all system components are running, but intended users can’t use the system:

• Trivial: delete all users, remove all permissions/roles

•Not Trivial: change some FLAGS column values in a DB

Page 5: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• Definition: De Facto DOS occurs when the systems’

functionality is not available to the users, or when the

response time is poor, but all the components are up

and running.

Page 6: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• A system allows for wildcard or nested queries

•Common in “search” functionality

• Multiple calls for “heavy” actions (e.g.

encryption)

Page 7: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• By default, Oracle DBs supported systems are

susceptible to De Facto DOS (versions 10, 11,

Exadata)

• All accounts are defined in a “User Profile”

• By default, all the accounts (but few) are defined under the

DEFAULT user profile

• The DEFAULT user profile definition is “interesting”…

Page 8: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 9: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 10: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• SQL Server DBs may be susceptible to De Facto DOS,

By Microsoft security recommendations…

• Formal security documentations recommend: Windows

Authentication to be configured in the SQL Server.

• This is the recommendation for all accounts, including code

entities.

• Earlier versions of AD (prior to AD 2008) do not allow for a

different lockout policy to different entities. All entities inherit

the root lockout policy.

•What is the root policy?

Page 11: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 12: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 13: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• Two-Tier Architecture

Page 14: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• The roots of Three-Tier Architecture

Page 15: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• Concurrent Three-Tier Architecture, the presentation tier

migrated elsewhere.

Page 16: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• Not a simple graph any more...

Page 17: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• Not a simple graph any more...

(Strongly connected graph)

Page 18: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 19: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• Defense In-Depth is dead.

Page 20: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 21: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• Defense In-Depth is dead.

• Is this better?

Page 22: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

Buzz development methodologies

are a security challenge

Page 23: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

•Reality check: it is VERY difficult

to maintain high security level

Page 24: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• Reality check:

Page 25: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• Reality check:

Page 26: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 27: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 28: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 29: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 30: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• In 2012 a US drone airplane forced to land in Iran

Page 31: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• In 2012 a US drone airplane forced to land in Iran

• Intelligence drones business logic includes numerous

communication channels and BL components.

• The needle in the haystack: One communication

channel was not secured enough

Page 32: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 33: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• Any actual payload is irrelevant

• Locating the needle is more important

Example:

• April 2013 OpIsrael was aimed at DOS or

DDOS.

• Attacks analysis shows that most attacks where

“standard”, weak, and achieved poor results

Page 34: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 35: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 36: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 37: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• Determination - a key in locating the needle.

• Ludicrous attacks are in the hood: Watering

hole and SpearPhishing were employed.

• The attack: "fairly subtle", yet "significant and

tenacious"

Page 38: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 39: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• Mr. Ed Schwartz, VP and CISO, RSA, the Security

Division of EMC: “Recently we learned that two

factor authentication is not enough anymore”, • Managing Advanced Security Threats Using Big Data Analytics,

International Cyber Conference II,

Israel, June 2012

Page 40: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• The better an organization protects the perimeter, the more far-fetched the hacking Scenario

• Example: Watering hole – a technique intended for internal bypass of the perimeter security

• Attack scenarios commencing at a smart device, flowing to internal workstations, ending/landing on core soft-spots are on the horizon

Page 41: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• SSL is dead

• FW is dead

• IPS/IDS is dead

• Anti Virus is dead

• [insert security product X here] is dead:

•XML FW, DB FW,

Page 42: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 43: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 44: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• How far can a VERY easy DOS De

Facto attack affect an organization?

• Do organizations audit MQ security?

Page 45: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• Even when everything is OK, changes to

programming key features brings DOS even

closer

• Siebel & IE6 Example

Page 46: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• Sci Fi or Far-Fetched Scenario?

•US department of homeland security calls on

computer users to disable java

???

• Java 6.19 & Java 7.21 mixed code policy

Page 47: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:
Page 48: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• NASDAQ, 2011, Commerce stopped due to internal DOS

attack

Page 49: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• Forget the payload

• Find the needle in the haystack

• Craft a specialized attack against “the needle”

Page 50: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

• Do not concentrate on the payload

• Do not concentrate only on perimeter protection

• Find the needle in the haystack

• Craft specialized security defenses to protect “the needle”

• Do not deter, there is no escaping of in-depth security.

Page 51: Yaniv Simsolo - OWASP · CISSP •A denial-of-service attack (DoS attack) is an attempt to make ... •Any actual payload is irrelevant •Locating the needle is more important Example:

Yaniv Simsolo,

CISSP


Introduction to Robotics Lecture II Alfred Bruckstein Yaniv Altshuler.

Introduction to Robotics Lecture II Alfred Bruckstein Yaniv Altshuler.

Yaniv Automne 2015

Yaniv Automne 2015

Yaniv Janson Sales Catalogue February 2011

Yaniv Janson Sales Catalogue February 2011

Yaniv Waissa

Yaniv Waissa

CONFidence 2014: Yaniv Miron: ATMs – We kick their ass

CONFidence 2014: Yaniv Miron: ATMs – We kick their ass

Bus Project Yaniv Stern Rachel Stahl Instructor: Ari Todtfeld.

Bus Project Yaniv Stern Rachel Stahl Instructor: Ari Todtfeld.

Gilad M. Guttmann and Yaniv Gelbstein

Gilad M. Guttmann and Yaniv Gelbstein

Yaniv brousset trabajo 5

Yaniv brousset trabajo 5

Product Hunt TLV | 2 Marketing Tricks by Yaniv Tross

Product Hunt TLV | 2 Marketing Tricks by Yaniv Tross

Mirabai Yaniv – Lakshmi Paice – Ishwari Reyes

Mirabai Yaniv – Lakshmi Paice – Ishwari Reyes

Yaniv Vardi, CEO Device Level Energy Management Technology.

Yaniv Vardi, CEO Device Level Energy Management Technology.

Radical Nature - Yaniv Peer

Radical Nature - Yaniv Peer

Continuous Delivery at Wix, Yaniv Even Haim

Continuous Delivery at Wix, Yaniv Even Haim

Convolutional Neural Networks Jeremias Sulam, Yaniv Romano ... · Convolutional Neural Networks in View of Sparse Coding Joint work with: Jeremias Sulam, Yaniv Romano, Michael Elad

Convolutional Neural Networks Jeremias Sulam, Yaniv Romano ... · Convolutional Neural Networks in View of Sparse Coding Joint work with: Jeremias Sulam, Yaniv Romano, Michael Elad

Vardan Papyan*, Yaniv Romano*, Michael Elad … Papyan*, Yaniv Romano*, Michael Elad October 17, 2017 Abstract In recent years, deep learning and in particular convolutional neural

Vardan Papyan*, Yaniv Romano*, Michael Elad … Papyan*, Yaniv Romano*, Michael Elad October 17, 2017 Abstract In recent years, deep learning and in particular convolutional neural

Yaniv Erlich Hannon Lab

Yaniv Erlich Hannon Lab

ML2012 Fp Yaniv Bar

ML2012 Fp Yaniv Bar

Yaniv final

Yaniv final

BROCHURE YANIV ÉTÉ 2015 (édition 35 ans)

BROCHURE YANIV ÉTÉ 2015 (édition 35 ans)

1 Slides: Asaf Shapira & Oded Schwartz; Sonny Ben-Shimon & Yaniv Nahum. Sonny Ben-Shimon & Yaniv Nahum. Notes: Leia Passoni, Reuben Sumner, Yoad Lustig.

1 Slides: Asaf Shapira & Oded Schwartz; Sonny Ben-Shimon & Yaniv Nahum. Sonny Ben-Shimon & Yaniv Nahum. Notes: Leia Passoni, Reuben Sumner, Yoad Lustig.