Posts

Showing posts from August, 2021

Advanced Topics in Security Testing: Dynamic Evasion in Exploit and Malware Packet Capture Replaying

Image
     The pandemic has greatly accelerated the pace of extending many aspects of our lives into the cloud: work, shopping, finances …. thanks to the omnipresent networks around us.  While it brings tremendous productivity, quality of life and profits,  it carries many dangers along as well: network and cloud security.     Because the Cloud is relatively new, a trillion dollar industry, the cloud security is involving just as rapidly as the innovation itself on the cloud.  Given that the attackers are motivated and relentless, effective network security testing is more important than ever, especially with the presence of vastly expanded attack surfaces on the ever increasing networking capable entities.    Security Testing by replaying packet captures (also called pcap) and malware files is an effective testing methodology. But the tool needed would be challenging to develop if the realism is required when replaying application and at...