05/10 (Wed.) 14:00 - 14:30
Don't let bugs out of the closet - Buff the development with Red Team
簡報連結
  • FORUM | Software Security Forum
  • LOCATION | Taipei Nangang Exhibition Center, Hall 2 7F 703
  • LEVEL | Intermediate
  • SESSION TYPE | Onsite
  • LANGUAGE | Chinese
  • SESSION TOPIC | Red Team Exploit of Vulnerability Penetration Testing

In recent years, penetration testing and red team assesment have become a way for enterprises to examine their product security. Although mitigating vulnerabilities is better late than never, it would be more desirable if the vulnerabilities aren't released at the first place. This agenda will illustrate the benefits of having a red team within the company. By conducting penetration tests during the development, vulnerabilities can be found and eliminated in advance. Additionally, the collaboration between the red team and developers can also increase the sensitivity of developers regarding security threats. Moreover, when designing and implementing security-related functions, the red team can also act as consultants, providing perspectives of attackers and ensuring security by design. Through all of the above, enterprises will be able to take advantage of the red team to buff the development process, making it faster and safer. Eventually, allowing the red team and blue team, which are generally considered to be on the opposite sides, to coordinate and cooperate with each other and to enhance the enterprise's security quickly, smoothly and thoroughly.