Security Assessing Java Rmi
|
|
|
||||||||||||
Description: This is the video of the presentation titled "Security Assessing Java RMI" given by Adam Boulton at AppSec 2008.
Talk Description: The talk will describe the process for performing a security assessment on Java RMI services, including identifying and making unauthorised calls to the service. There are currently no available tools to perform object and method identification. The techniques described in this talk will be used together with an innovative prototype for an RMI assessment tool to demonstrate how an RMI service can be interrogated and manipulated from a zero knowledge perspective.