Global AppSec Dublin 2023

I work at a large SaaS enterprise. We have dedicated SOC, application & infrastructure security teams and a thriving bug bounty program. We invest millions of dollars in cutting edge security tools & SDLC processes. Sounds like we should be covered for the basics, right? Still, one day I started looking for signs of vulnerabilities in server error logs, and to my horror found some 'SQL syntax' errors. This opened up Pandora's box. 'You have an error in your SQL syntax' - in the context of security everyone knows what this error means. Surprisingly, AppSec teams probably don't actively search for such exceptions in server error logs. Error and exception logs can often contain indications of application vulnerabilities, and with the right methodology you can identify many vulnerabilities that are already present in your production environment. In this talk I will present our journey through the dark forest of server error logs, which resulted in detection of many vulnerabilities of all sorts and creating a reliable application security monitoring pipeline.

Dates

Author

Conferences

Tags

Log story short: Chopping through forests of data

tldr - powered by Generative AI