Denim Group, Ltd. Blog

Pre-RSA Podcast: What Does Fixing Application Vulnerabilities Cost?

By Dan Cornell

I sat down witih Jeanne Friedman last week and recorded a short podcast preview for my upcoming presentation at RSA 2012 “Remediation Statistics: What Does Fixing Application Vulnerabilities Cost?” You can see her post online here and you can download the 8 minute podcast here. The actual session is ASEC-302 and will be Thursday, March 1^st, 2012 at 9:30am in Room 302. Hope to see folks there!

Contact us if you want to meet up at RSA.

--Dan

dan _at_ denimgroup.com

@danielcornell

Posted via email from Denim Group's Posterous

OWASP AppSecUS Video/Slides Online: Self Healing Cloud

By Dan Cornell

The video from my “Self Healing Cloud” presentation from OWASP AppSec US in Minneapolis last year is now online:

The presentation discusses automatically generating “virtual patch” rules for IDS/IPS and WAF systems based on web application scanner results. We have been working on this technique for a while and have a lab set up to test and optimize our results. We have created a “hub-and-spoke” system for creating virtual patches for a variety of blocking technologies based on uploading results from most common commercial and open source web application vulnerabilitity scanning results.

The slides for the presentation are also online:

Contact us if you want to discuss expediating software remediation with virtual patching.

--Dan

dan _at_ denimgroup.com

@danielcornell

Posted via email from Denim Group's Posterous