Get a Free GIAC Cert Attempt or $350 Off through 5/29 with Online Training!

Webcasts

To attend this webcast, login to your SANS Account or create your Account.

All Your Data Belongs to Us: How to Defend Against Credential Stuffing

  • Tuesday, April 2nd, 2019 at 10:30 AM EDT (14:30:00 UTC)
  • Johannes Ullrich
This webcast has been archived. You can view the webcast presentation and download the slides by logging into your SANS Portal Account or creating an Account. Click the Register Now button after you have logged in to view the Webcast.

You can now attend the webcast using your mobile device!

Overview

All data has been stolen. Attackers are routinely sharing datasets with billions of credentials to attack web sites. These attacks have evolved beyond simple password reuse. Attackers will use rich datasets with personal information like phone numbers, addresses and social security numbers to either take over or establish accounts. We will discuss what datasets are commonly available to attackers, how they are using them and how to defend against these attacks. Defenses against these attacks are complex in part because they need to carefully balance risk and business needs.

Speaker Bio

Johannes Ullrich, PhD

As chief research officer for the SANS Institute, Johannes is currently responsible for the SANS Internet Storm Center (ISC) and the GIAC Gold program. He founded DShield.org in 2000, which is now the data collection engine behind the ISC. His work with the ISC has been widely recognized, and in 2004, Network World named him one of the 50 most powerful people in the networking industry. Prior to working for SANS, Johannes worked as a lead support engineer for a Web development company and as a research physicist. Johannes holds a PhD in Physics from SUNY Albany and is located in Jacksonville, Florida. He also enjoys blogging about application security tips.

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.