Risky Business #396 -- Chris Wysopal on scanning for backdoors
On this week's show we've got two feature interviews!
We're talking to Chris Wysopal from Veracode about using static analysis techniques to find back doors in software. With Juniper, AMX, Fortinet and Cisco all experiencing either maliciously planted or accidental backdoors, this is a hot topic. Chris joins us to talk about how you go about finding this stuff and whether or not vendors are taking this issue seriously enough.
We also check in with Martijn Grooten, editor of Virus Bulletin. We're having a quick chat to him about how the AV industry is reacting to Tavis Ormandy's latest research into the security of its products. He's been reporting bugs in all sorts of AV products lately and apparently the disclosures are having an impact.
This week's sponsor interview is a special one -- it's with Haroon Meer of Thinkst Applied Research. Thinkst has released some free tools that generate and track honey tokens. Old ideas made easy and workable... he'll be along to explain his new tech. Personally think this stuff is great.. just great... and of course he'll plug his even more awesome commercial stuff, Canary Tools.
Adam Boileau, as always, drops in for a chat about the week's news headlines.
Links to everything are in this week's show notes.
PLUS! News with Grugq...3 days 9 hours ago
Not just shadowbrokers news! ZOMG!3 days 10 hours ago
What a time to be alive...1 week 3 days ago
News, slide decks and more!1 week 3 days ago
Revisiting last week's post...1 week 6 days ago