Tackling Privilege Escalation with Offense and Defense
We will describe some of the surprising discoveries by researchers submitting to the Zero Day Initiative program, which were used to verify the application hardening as it occurred. Over the years, this multi-pronged approach eliminated a large set of vulnerabilities resident in a security model implemented in a JavaScript engine.
By Abdul-Aziz Hariri and Edgar Pek
Full Abstract & Presentation Materials: https://www.blackhat.com/eu-19/briefi...
