Stream: Security
Time: 14:15 - 15:00
Over the past 30 years the art of finding C and Java vulnerabilities has been honed on distributed systems. This talk will go over how these attacks can and have been adapted to work on the mainframe environment. In C, the principal attacks come from the lack of memory safety, which can cause buffer overflows, or in mainframe speak "Storage Overlays". With Java however, a type of attack, exploits the improper management of byte streams during deserialization. Listeners will learn from this talk how to identify insecure C and Java code, through looking at the source as well as testing the program itself. With this we will make the code that we develop/use on the mainframe more secure.
There is currently no attachment for Metamorphōsēs: Transforming distributed vuln types to the mainframe
For the past 5 years, ive been finding and reporting security exposures in mainframe software. Other than that I do hikes, board games and hockey.
Click here to give some Feedback so we can make it even better next year!