Websec at DerbyCon 2013
At DerbyCon 2013 in Louisville, Kentucky, Websec CTO Roberto Salgado presented techniques for optimizing and obfuscating SQL injection attacks to evade intrusion detection.
Roberto's talk at this third edition of DerbyCon was ') UNION SELECT `This_Talk` AS ('New Optimization and Obfuscation Techniques')%00, in the "Break it" track on Sunday afternoon. The talk, which he also gave at Black Hat USA in August, covers techniques for optimizing and obfuscating SQL injection to make attacks more effective and evade intrusion detection systems (IDS).
Thanks to Adrian Crenshaw (@irongeek_adc), recordings of most DerbyCon talks are already online, including Roberto's below. The full list of DerbyCon 2013 talks is on his site.
Roberto will give the talk again at AppSecUSA in New York on November 21.