Attacking and Securing FTP
Jay Beale - Attacking and Securing FTP The Unix FTP servers have been called 'the IIS of the Unix world' for their frequent and potent vulnerabilities.
Summary
Architecture and Background
Jay Beale - Attacking and Securing FTP The Unix FTP servers have been called 'the IIS of the Unix world' for their frequent and potent vulnerabilities. Each has provided remote exploits, usually at the root privilege level, on a consistent and frequent basis.
Vulnerability Analysis
WU-FTPd is the most popular Unix FTP server by far, shipping by default on most Linux distributions, and even on Solaris, and being installed most commonly on the rest of the Unix platforms. This talk will demonstrate working exploits on WU-FTPd, then show you how to configure WU-FTPd to defeat them.
Exploitation and Demonstrations
While the talk will use WU-FTPd as the primary example, we'll also discuss ProFTPd, the other major FTP daemon for Unix. Jay Beale is the president and founder of JJB Security Consulting and Training, LLC.
Remediation and Defensive Strategies
He is the Lead Developer of the Bastille Linux Project, which creates a hardening program for Linux and HP-UX. Jay is the author of a number of articles on computer security, along with the upcoming book "Locking Down Linux the Bastille Way" to be published in the second quarter of this year by Addison Wesley. You can learn more about his articles, talks, courses and consulting via
Related talks
Main Stage·53 min
Jay Beale
Jay Beale - Bastille Linux 2.
Main Stage·24 min
jives
jives details jives, Passive Host Auditing Traditionally, IDS systems such as snort have been used to monitor attacks against or within a network.
Main Stage·48 min
Jay Beale
Jay Beale details jay Beale, Introducing the Bastille Hardening Assessment Tool Bastille has been re-released as an assessment and hardening tool.