Network Application Firewalls: Exploits and Defense
Brad Woodberg explores network application firewalls: exploits and defense at DEF CON 19, examining network-firewalls and practical defenses.
Summary
Architecture and Background
Brad Woodberg - Network Application Firewalls: Exploits and Defense In the last few years, a so called whole new generation of firewalls have been released by various vendors, most notably Network Application Firewalling.
Vulnerability Analysis
While this technology has gained a lot of market attention, little is actually known by the general public about how it actually works, what limitations it has, and what you really need to do to ensure that you're not exposing yourself.
Exploitation and Demonstrations
This presentation will examine/demystify the technology, the implementation, demonstrate some of the technology and implementation specific vulnerabilities, exploits, what it can and can't do for you, and how to defend yourself against potential weaknesses.
Remediation and Defensive Strategies
Brad Woodberg: I hail from just outside of Detroit MI, graduating from Michigan State University with a BS in Computer Engineering. Prior to joining Juniper Networks a few years ago, I was a security consulting engineer at a consulting firm in Ann Arbor Michigan for four and a half years, responsible for everything from penetration testing to intrusion investigation, managed services, implementations - whatever our sales guys could sell. At Juniper I'm heavily involved with the product development, and security testing, and all sorts of involvement with our security team. In addition to my work at Juniper, I have also co-authored three technical books, Junos Security, Configuring Netscreen/SSG firewalls, and Configuring Juniper SSL VPN.
Related talks
Main Stage·37 min
Engebretson · Pauli
Engebretson and Pauli explores mamma dont let your babiesgrow up to be pen testers at DEF CON 19, examining network-firewalls and practical defenses.
Main Stage·4 min
Thomas J. Munn
Thomas J. Munn examines thomas Munn - Need for home-based firewalls.
Main Stage·49 min
Robert Graham
Robert Graham explores evading network-based intrusion detection systems at DEF CON 8, examining firewalls and practical defenses.


