Download pptx - OpenSSL Heartbleed Vulnerability Explained & Tips for Protection

Transcript

Page 1: OpenSSL Heartbleed Vulnerability Explained & Tips for Protection

OpenSSL Heartbleed Vulnerability Explained & Tips for ProtectionOpenSSL Heartbleed Vulnerability | Rapid7 Whiteboard

Wednesday

Recommended

OpenSSL after HeartBleed• 11/08/13: added new OE: Linux 3.4 64-bit under Citrix XenServer running on Intel Xeon E5-2430L (x86) without AES-NI (gcc Compiler Version 4.8.0); Linux

OpenSSL after HeartBleed• 11/08/13: added new OE: Linux 3.4 64-bit under Citrix XenServer running on Intel Xeon E5-2430L (x86) without AES-NI (gcc Compiler Version 4.8.0); Linux Documents

Cryptsoft , OpenSSL Team OpenSSL after HeartBleed · SESSION ID: #RSAC Rich Salz. OpenSSL after HeartBleed. PDAC-T10R. Akamai Technologies, OpenSSL Team. Tim Hudson. Cryptsoft , OpenSSL

Cryptsoft , OpenSSL Team OpenSSL after HeartBleed · SESSION ID: #RSAC Rich Salz. OpenSSL after HeartBleed. PDAC-T10R. Akamai Technologies, OpenSSL Team. Tim Hudson. Cryptsoft , OpenSSL Documents

Programming with OpenSSL and libcrypto in examplessyrinx/presentations/openssl/OpenSSL... · Programming with OpenSSL and libcrypto in examples BurgasLab, Burgas April, 2014 Shteryana

Programming with OpenSSL and libcrypto in examplessyrinx/presentations/openssl/OpenSSL... · Programming with OpenSSL and libcrypto in examples BurgasLab, Burgas April, 2014 Shteryana Documents

Risk Assessment of Buffer “Heartbleed” Over-read ... · speciﬁc Heartbleed bug. As an emerging type of vulnerability, we need more research on the mitigation of the buffer over-read

Risk Assessment of Buffer “Heartbleed” Over-read ... · speciﬁc Heartbleed bug. As an emerging type of vulnerability, we need more research on the mitigation of the buffer over-read Documents

Heartbleed Bug Internet

Analysis of SSL Certiﬁcate Reissues and Revocations in the ...tdumitra/papers/IMC-2014.pdf · iment. In mid-April 2014, an OpenSSL security vulnera-bility, Heartbleed, made it possible

Analysis of SSL Certiﬁcate Reissues and Revocations in the ...tdumitra/papers/IMC-2014.pdf · iment. In mid-April 2014, an OpenSSL security vulnera-bility, Heartbleed, made it possible Documents

Sullivan heartbleed-defcon22 2014

Sullivan heartbleed-defcon22 2014 Internet

Tool to exploit Heartbleed Vulnerabilityethesis.nitrkl.ac.in/7200/1/Tool_Naidu_2015.pdfTool to exploit Heartbleed Vulnerability Thesis submitted in partial ful llment of the requirements

Tool to exploit Heartbleed Vulnerabilityethesis.nitrkl.ac.in/7200/1/Tool_Naidu_2015.pdfTool to exploit Heartbleed Vulnerability Thesis submitted in partial ful llment of the requirements Documents

You’ve Got Vulnerability: Exploring Effective Vulnerability …cseweb.ucsd.edu/~savage/papers/USESEC16.pdf · 2016. 8. 10. · For exam-ple, to promote patching of the 2014 OpenSSL

You’ve Got Vulnerability: Exploring Effective Vulnerability …cseweb.ucsd.edu/~savage/papers/USESEC16.pdf · 2016. 8. 10. · For exam-ple, to promote patching of the 2014 OpenSSL Documents

Gestion des vulnérabilités logicielles - OSSIR · Heartbleed Heartbleed is a security bug in the open-source OpenSSL cryptography library, widely used to implement the Internet's

Gestion des vulnérabilités logicielles - OSSIR · Heartbleed Heartbleed is a security bug in the open-source OpenSSL cryptography library, widely used to implement the Internet's Documents

HEARTBLEED ATTACK

HEARTBLEED ATTACK Documents

Heartbleed Bug Vulnerability: Discovery, Impact and Solution

Heartbleed Bug Vulnerability: Discovery, Impact and Solution Technology

CON7403 – ‘Heartbleed’ (CVE-2014-0160) Case Study II Vulnerability Handling Perspective Bruce Lowenthal – Senior Director, Security Alerts Eric Maurice

CON7403 – ‘Heartbleed’ (CVE-2014-0160) Case Study II Vulnerability Handling Perspective Bruce Lowenthal – Senior Director, Security Alerts Eric Maurice Documents

A technical view of theOpenSSL ‘Heartbleed’ vulnerabilitydocshare01.docshare.tips/files/26848/268489456.pdf · A technical view of theOpenSSL ‘Heartbleed’ vulnerability A

A technical view of theOpenSSL ‘Heartbleed’ vulnerabilitydocshare01.docshare.tips/files/26848/268489456.pdf · A technical view of theOpenSSL ‘Heartbleed’ vulnerability A Documents

The Bad-Attitude Guide to Computer Security · Security holes in Mosh’s lifetime TLS: I goto fail (Secure Transport) I GnuTLS verify (GnuTLS) I Heartbleed (OpenSSL) I Lucky Thirteen

The Bad-Attitude Guide to Computer Security · Security holes in Mosh’s lifetime TLS: I goto fail (Secure Transport) I GnuTLS verify (GnuTLS) I Heartbleed (OpenSSL) I Lucky Thirteen Documents

Heartbleed Bug Advisory (CVE-2014-0160)accuvantstorage.blob.core.windows.net/web/file/... · Heartbleed Bug Advisory (CVE-2014-0160) 3 Revision: 1.1 Technical Summary The Heartbleed

Heartbleed Bug Advisory (CVE-2014-0160)accuvantstorage.blob.core.windows.net/web/file/... · Heartbleed Bug Advisory (CVE-2014-0160) 3 Revision: 1.1 Technical Summary The Heartbleed Documents

Heartbleed Bug Infographic

Heartbleed Bug Infographic Documents

Incident Response And a debrief of UNM’s response to the Heartbleed vulnerability 1 Presented by: Michael Burlison, Information Security Analyst – CISSP,

Incident Response And a debrief of UNM’s response to the Heartbleed vulnerability 1 Presented by: Michael Burlison, Information Security Analyst – CISSP, Documents