Presenting a new angle on a popular attack vector on databases: SQL Injection.
Agenda 6:00 – 6:30 Pizza and Networking 6:00 – 6:45 Announcements 6:45 – 8:15 , Todd DeSantis - SQL Injection 8:15 – 8:30 Closing remarks and give-a-ways
We will describe types and techniques of SQL Injection attacks on both RDBMS-based web applications and built-in database stored program units, and show how simple SQL Injection can be used to own the database server through the means of privilege escalation.
We will also list ways of preventing SQL Injection attacks - ranging from secure coding practices to various external tools that will alert and prevent SQL Injection attempts, and demonstrate how hacker techniques of evasion can be used to subvert them.
Finally, we will introduce new deep inspection tools for Microsoft SQL Server that can prevent SQL injection, even in zero-day scenarios.
Take away points:
Email
Facebook
Twitter
LinkedIn
MySpace
Digg
Delicious
Reddit