90 likes | 314 Views
Computer Emergency Response Team. CERT. Studies internet security vulnerabilities Researches long term changes in networked systems Develop information and security to help you improve computer security. Recent Security Updates. Basic Fuzzing Framework 2.0
E N D
CERT • Studies internet security vulnerabilities • Researches long term changes in networked systems • Develop information and security to help you improve computer security
Recent Security Updates • Basic Fuzzing Framework 2.0 • Update allows users to more easily start “fuzzing”
Fuzzing • Software testing technique • Automated or semi-automated • Provides invalid or random data to the computer program • Program is then monitored for crashes • Helps find potential security issues in the computer
Basic Fuzzing Framework 2.0 • Rewritten in Python from Perl to improve performance • Added a “Rangefinder” • User doesn’t have to figure out manually how much input to fuzz • Automatically adjusts degree of input fuzzing
Basic Fuzzing Framework 2.0 Continued • Rewrote Crash minimization • Logging in BFF uses Python logging module for all its logging needs • Incorporated a few statistics and visualization tools to help with analyzing BFF
Other Recent Security Alerts • Adobe Flash has a vulnerability where it is open to an attacker • Solution: disable flash or apply an update • Microsoft Windows based applications may insecurely download security threats from a potential attacker • Solution: download a patch to fix this issue
Safe Computers • Constantly looking for possible security threats and solutions • CERT continues to provide up to date protection for computers