WWHF 2020 (Virtual): Stopping Python-Based Backdoor Attacks - Peter Smith

https://www.wildwesthackinfest.com

00:00 – A Vendor Named Edgewise
02:24 – Beginning in Syndication
02:42 – Python Backdoor
03:46 – DEMO: Python Backdoor Attack
04:58 – Scenario 1
07:06 – Scenario 2
09:10 – Anatomy of Backdoor
24:10 – The Edgewise Platform

----

The recent MechaFlounder was a backdoor attack linked to Iranian threat actors who targeted Turkish entities. Similar Python-based backdoor attacks have managed to evade traditional network security defenses and propagate inside their target environments. Peter Smith, Founder and CEO of Edgewise, demonstrates the attack and how it can be stopped with zero trust security:
- Why network address-based defenses alone cannot prevent attack propagation and lateral movement of Python-based attacks
- Why protection based on software-identity verification (zero trust security) can stop such attacks
- How Purple teams can collaborate more effectively with a shared visualization and understanding of application topology and attack pathways to targets

Peter Smith, Edgewise Founder and CEO, is a serial entrepreneur who built and deployed Harvard University’s first NAC system before it became a security category. Peter brings a security practitioner’s perspective to Edgewise with more than ten years of expertise as an infrastructure and security architect of data centers and customer-hosting environments for Harvard University, Endeca Technologies (Oracle), American Express, Fidelity UK, Bank of America, and Nike. Peter holds several patents on zero trust innovations and has spoken at numerous conferences on zero trust strategy and implementation.