Owasp5024 Part1 - SECURITY ASSESSING JAVA RMI, with Adam Boulton.

SECURITY ASSESSING JAVA RMI, with Adam Boulton. The talk will describe the process for performing a security assessment on Java RMI services, including identifying and making unauthorised calls to the service. There are currently no available tools to perform object and method identification. The techniques described in this talk will be used together with an innovative prototype for an RMI assessment tool to demonstrate how an RMI service can be interrogated and manipulated from a zero knowledge perspective. Adam Boulton is a Research Developer and Security Consultant for Corsaire. He has been involved in all aspects on the SDLC with a focus upon security. He graduated from Sheffield Hallam University with a 1st Class Software Engineering Degree and is also certified for secure code assessments. Adam’s past roles have included that of a Software Engineer for the Ministry of Defence and a Virus Analyst for Sophos Plc. At both positions he was heavily involved in Software Development, Reverse Engineering and implementing security. --- Recorded at the Open Web Application Security Project (www.OWASP.org) NYC Conference on Sep 25, 2008 – Content produced by www.MediaArchives.com - Many other OWASP Conference videos available on www.OWASP.tv Get Involved Today! ---

Category:

Science & Technology

Tags:

• Open
• Web
• Application
• Security
• Tools
• Internet
• Hack