Exploitation over Time: Stacks, ASLR, DEP, and ROP
Exploitation has evolved over the last twenty years. This webcast covers the history of exploitation and the defenses that have been engineered to protect our systems. You will walk away from this webcast clearly understanding the mechanics of most types of exploitation, how the defenses work, how easily they can be bypassed, all of which provide a strong motivation for a close look at your organization’s patch cycle!
Throughout the webcast, David will demonstrate step by step walk-throughs of each type of exploitation, building upon the exploit as defenses are added on the target system. Even if you are not super-technical, there are really important take-aways!
Presenter Bio: David Hoelzer, Instructor at SANS
David Hoelzer is the author of more than twenty days of SANS courseware. He is an expert in a variety of information security fields, having served in most major roles in the IT and security industries over the past twenty-five years. Recently, David was called upon to serve as an expert witness for the Consumer Financial Protection Bureau in a landmark case regarding information security governance within corporations in the financial sector and has previously served as an expert for the Federal Trade Commission for GLBA Privacy Rule litigation and other matters. David has been highly involved in governance at SANS Technology Institute, serving as a member of the Curriculum Committee, Long Range Planning Committee, GIAC Ethics Board, and as Dean of Faculty. As a SANS instructor, David has trained security professionals from organizations including NSA, DHHS, Fortune 500 security engineers and managers, various Department of Defense sites, national laboratories, and many colleges and universities. Outside of SANS, David is a research fellow in the Center for Cybermedia Research, a research fellow for the Identity Theft and Financial Fraud Research Operations Center (ITFF/ROC), an adjunct research associate of the UNLV Cybermedia Research Lab, a research fellow with the Internet Forensics Lab, and an adjunct lecturer in the UNLV School of Informatics. David has written and contributed to more than 15 peer reviewed books, publications, and journal articles. Currently, David serves as the principal examiner and director of research for Enclave Forensics, a New York/Las Vegas based incident response and forensics company. He also serves as the chief information security officer for Cyber-Defense, an open-source security software solution provider. In the past, David served as the director of the GIAC Certification program, bringing the GIAC Security Expert certification to life. David holds a BS in IT and an MS in Computer Science, having spent time either attending or consulting for Stony Brook University, Binghamton University, and American Intercontinental University.
This webinar is presented on behalf of the National Cybersecurity Student Association and SANS Technology Institute (STI).