Tuesday, July 31, 2007

New DB attack vector

Researchers at Core Security Technologies have donned their black hats and are preparing a presentation about <A HREF="http://www.eweek.com/article2/0,1895,2164067,00.asp?kc=EWKNLNAV073107STR1">a new database attack vector</A> that relies solely on the inherent characteristics of the indexing algorithms.

The attack, which will be demonstrated Aug. 1 against the MySQL database engine at Black Hat USA in Las Vegas, affects database management systems using BTREE, the popular database indexing algorithm and data structure. Traditionally, database security breaches are mostly due to the abuse of wrongly configured authorization and actual control permissions or the exploitation of bugs in front-end Web applications through SQL injection, said Core Security Chief Technology Officer Ivan Arce.

News Timeline



From Our Sponsor