When Space Elephants Attack: a DEFCON Challenge for Database Geeks
Abstrct - When Space Elephants Attack: A DEFCON Challenge for Database Geeks The Schemaverse is a vast universe found purely within a PostgreSQL database.
Summary
Architecture and Background
Abstrct - When Space Elephants Attack: A DEFCON Challenge for Database Geeks The Schemaverse is a vast universe found purely within a PostgreSQL database.
Vulnerability Analysis
Control your fleet of ships manually with SQL commands or write AI in PL/pgSQL so they control themselves while you sit back and enjoy the con.
Exploitation and Demonstrations
This presentation will help my fellow database geeks to understand the game play mechanics used in The Schemaverse so they can compete in the weekend long tournament.
Remediation and Defensive Strategies
Abstrct, the author of The Schemaverse game, is a hobbyist programmer and data aficionado. While not pretending to have much actual experience with database security in the professional world, he has enjoyed making database systems do ridiculous things since his first SELECT.
Related talks
Main Stage·38 min
Alexander Kornbrust
Alexander Kornbrust explores hacking and securing db2 luw databases at DEF CON 19, examining database-security and practical defenses.
Main Stage·47 min
David Litchfield
David Litchfield - Hacking and Forensicating an Oracle Database Server David Litchfield is recognized as one of the world's leading authorities on database security.
Main Stage·46 min
Holst Swende · and Karlsson
Holst Swende and and Karlsson explores web application analysis with owasp hatkit at DEF CON 19, examining database-security and practical defenses.