OWASP server-side request forgery (noun)
An attack technique that leverages an unprotected web server as a proxy for attackers to send commands through to other computers.
Podcast Info
HOST(S):
Rick Howard is the CSO of N2K and the Chief Analyst, and Senior Fellow at the N2K Cyber, formerly CyberWire. His past lives include CSO at Palo Alto Networks, CISO at TASC, the GM at Verisign/iDefense, the Counterpane SOC Director, and the Commander of the Army's Computer Emergency Response Team (CERT). Rick served 25 years in the Army, taught computer science at West Point, edited two books and just published his own book, "Cybersecurity First Principles: A Reboot of Strategy and Tactics" and he is regularly joined at the N2K Cyber's Hash Table by a collection of industry experts.
Follow Rick Howard
Schedule: Tuesdays
Creator: CyberWire, Inc.
ADVERTISEMENT
Sponsored by Sonatype
Sonatype’s full-spectrum software supply chain automation platform allows engineering and security teams to manage software quality and governance using a single control plane. The company solves the problem of how to balance speed, quality, intelligence and security at scale, equipping teams with the tools they need to continually code smarter, fix faster, and be secure. Learn more.