EDS Exploitation Detection System
Amr Thabet explores eds exploitation detection system at DEF CON 21, examining penetration-testing and practical defenses.
Summary
Architecture and Background
(Transcription coming soon, sorry for the delay ) EDS: Exploitation Detection System AMR THABET MALWARE RESEARCHER, Q-CERT In the last several years, exploits have become the strongest weapons in cyber warfare. Exploit developers and vulnerability researchers have now become the nuclear scientists of the digital world.
Vulnerability Analysis
OS Companies and third party companies have created several security mitigation tools to make it harder to use these vulnerabilities and have made exploit creation harder. In this presentation, I will talk about a new security mitigation tool which is based on the co-operation of several mitigations to cover their weaknesses.
Exploitation and Demonstrations
It's based on monitoring the memory changes without decreasing the performance of the running application and creates a multi-layer protection with regular mitigations. Amr Thabet (@Amr_Thabet) a Malware Researcher at Q-CERT with 5+ years experience in reversing malware and researching.
Remediation and Defensive Strategies
I'm the Author of many open-source tools like Pokas Emulator and Security Research and Development Framework (SRDF). Facebook: Materials:
Related talks
Main Stage·50 min
Chris John Riley
Chris John Riley explores defense by numbers: making problems for script kiddies at DEF CON 21, examining penetration-testing and practical defenses.
Main Stage·47 min
Fatih Ozavci
Fatih Ozavci explores voip wars return of the sip at DEF CON 21, examining penetration-testing and practical defenses.
Main Stage·20 min
Daniel Chechik · Anat Fox Davidi
Daniel Chechik and Anat Fox Davidi explores utilizing popular websites for malicious purposes at DEF CON 21, examining penetration-testing and practical defenses.