Arcane Web and Mobile Application Vulnerabilities | SANS@MIC Talk
13In this presentation, Bojan Zdrnja, senior SANS Internet Storm Center and CTO of a Croatian information security company INFIGO IS will go through some not so common, but devastating nevertheless, web and mobile application vulnerabilities.
Bojan's team performs almost 200 application penetration tests per year and finds a lot of critical vulnerabilities that are often overlooked not only by developers, but also by penetration testers.
We will not cover the typical, common vulnerabilities such as XSS, SQL injection and similar, that everyone (should - but they don't) know about, but will instead turn to less commonly known vulnerabilities and attack vectors on both web and mobile applications.
It does not matter if you are red, blue or purple team - details about discussed vulnerabilities will help improve your application security knowledge.
Speaker Bio
Bojan Zdrnja is Chief Technical Officer and leads the penetration testing team at INFIGO IS, a security company based in Croatia and, more recently, the UAE.
A graduate from the University of Zagreb, Faculty of Electrical Engineering and Computing, he holds a B.S in Engineering with specialization in computer sciences. After graduating in 2002, Bojan moved to New Zealand where he worked as a Security Officer at the University of Auckland for 5 years. He's very passionate about security - network, web, mobile, IoT - you name it, he wants to break it!
Bojan holds numerous certifications, including GCIA, GCIH, GWAPT, GXPN, GMOB, GMON, GREM, as well as CISSP.
Among other periodicals, Bojan has written a security column for a leading Croatian computer magazine, is the Author of Croatian publication What are computer viruses?, Contributor to AVIEN Malware Defense Guide for the Enterprise, and he's also a senior SANS Internet Storm Center handler. When time permits, he publishes diaries about various exotic security issues that he encounters during assessments, or about analyzed attacks and malware.