ReDoS is commonly known as a “bug” in systems, but the interview elaborates on how serious it is and how using this technique, various applications can be “ReDoSed”. These include, among others, Web Application, WAFs, IDS, AV, Web Servers, Client-side browsers (including cellular devices), and Database. The subject was first presented on OWASP 2009 conference, Hertzelia, Israel
OWASP Interview with Adar Weidman Published December 7, 2009
Adar Weidman is a senior software developer at Checkmarx. Adar has been active in the High Tech industry for over 15 years working as a software developer, algorithms expert and team leader. Adar holds a Bachelor’s degree in Computer Science, and a Master's degree in Operations Research and System Analysis from the Technion University in Israel. Prior to joining Checkmarx, Adar was a senior algorithms developer in Retalix. Adar has also held research and managerial positions in a governmental agency for over 10 years.
Listen to the full podcast on the OWASPwebpage; here or Go to the OWASP podcasts page; here Go to the OWASP ReDoS page; here
.png)
|