SecAdmin Confence 2015

GMV is giving one of the security lectures within SECADMIN CONFERENCE 2015 to be held in Seville on 11 and 12 December in the IT Engineering School (Escuela de Ingeniería Informática). 

Isidro Ramón Labrador, Head of Consultancy at GMV Secure e-Solutions, will be giving a paper called “Security and Consistency: ¿why could doing the same thing differently be a problem?” His lecture will look at the main causes of vulnerability, such as failing to deal properly with inputs, using testing options, failing to restrict permits correctly or relying on an input provided by the user. As Isidro Ramón argues, “all these causes are well known but there is one that is overlooked, and that is not responding uniformly to similar information and events”.

The paper will present examples of vulnerabilities’ produced by this inconsistent treatment, such as the vulnerabilities of HTTP Parameter Pollution or HTTP Response Splitting.