The Art of Software Security Assessment

mark July 29th, 2009

Our BlackHat 2009 Whitepaper is now available here. Here we discuss the details of the stuff we are presenting, including the ATL vulnerabilities and Killbit bypass. We also discuss some vulnerability classes that are unique to interoperability layers - primarily type confusion and object retention.

Hope to see some of you in the talk!

• Discussion
• Comments(1)

mark July 17th, 2009

David Dewey, Ryan Smith, and myself are speaking at the upcoming BlackHat conference on Attacking Interoperability. I have written an overview of what our speech is going to contain and it is available on the ISS blog here.

• Discussion
• Comments(0)