The Great Database Heist: Where’d all my Data Just Go!?

Date: Aug 12th, 2021
Time: 11:00am or 3pm

Synopsis:

Databases are fantastic – providing a standardised interface for creating, updating, reading and deleting data from a backend system. They can be optimised to efficiently service your applications data storage and retrieval requirements, allowing it to scale effortlessly… and, via common pitfalls in their use, they can give a hacker access to all your data too.

When paired with a public web interface, it becomes critical to ensure that any data access or modification is strictly controlled. When attackers are able to bypass installed access controls and exploit common pitfalls in web application implementations, they can often gain the “keys to the kingdom” – the ability to modify, create or delete any or all of an organisation’s data, at will.

We will explore how such common OWASP Top 10 vulnerabilities arise, looking at SQL and NoSQL injection attacks and exploits, and importantly at how to avoid them, sparing no detail whilst being accessible also at a non-technical level.

Overview:

• The basics of SQL injection
• Advanced exploitation
• NoSQL vulnerabilities and exploitation
• How to avoid these vulnerabilities

Sign-up below:

11am: https://us06web.zoom.us/webinar/register/1316285211670/WN_qks75898SImXWnbTHt2zKw
3pm: https://us06web.zoom.us/webinar/register/1816285212206/WN_hhpK3Q89TDOByk5N5anK_w