nullcon Goa 2017 - Injecting Security Into Web Apps With Runtime Patching And Context Learning

This talk focuses on web application security, specifically addressing the limitations of traditional Web Application Firewalls (WAFs) in detecting and thwarting code injection vulnerabilities. The speaker, Ajin Abraham, presents his research on implementing a runtime application patching algorithm to protect insecurely coded applications from various web attacks such as SQL Injection and Cross Site Scripting. He introduces Runtime Application Self Protection (RASP), a next-generation technology that injects security into applications by understanding their internal workings, enabling real-time defense against sophisticated threats. The session includes proof of concept code and demonstrations of methodologies to prevent vulnerabilities that traditional WAFs cannot address, offering insights into the future of runtime protection in application security.