Presenter: Josh Shaul - CTO, AppSecInc

Title: Exploiting the Top Ten Database Vulnerabilities and Misconfigurations

Abstract: Over the course of this one hour presentation, a description of some of the sophisticated methods used in invading enterprise databases will be discussed along with a thorough review of the three commonly used versions of SQL server (SQL 2000, SQL 2005, and SQL 2008) and the evolution of the security issues and features in each will be provided. An overview of the top ten vulnerabilities and misconfigurations will be discussed.

Recorded at BSidesRI 2013.