T o w a r d s E a s i e r S e c u r i t y P a - - PowerPoint PPT Presentation

https://board.net/p/PatchPorting

T

• w

a r d s E a s i e r S e c u r i t y P a t c h P

• r

t i n g

L u c i a n

• B

e l l

• l

u c i a n

• @d

e b i a n .

• r

g l u c i a n

• .

b e l l

• @i

b m . c

• m

J

• i

n t w

• r

k w i t h J

• e

y S c h w a r z a n d J e s ú s P é r e z

https://board.net/p/PatchPorting

https://board.net/p/PatchPorting

https://board.net/p/PatchPorting

B l u e m i x S e c u r i t y T r a c k e r

https://board.net/p/PatchPorting

D e mo

https://board.net/p/PatchPorting

S t a t i s t i c s

Wheezy Jessie Stretch Buster Sid

50 100 150 200 250

https://board.net/p/PatchPorting

C u r r e n t (

• i

s h ) F e a t u r e s

• B

u i l d i n g a s a “ t e s t ”

• Q

u i l t

• r

e a d y p a t c h a s a r e s u l t

• T

r i e s p a t c h e s f r

• m

d i f e r e n t p r

• v

i d e r s

• M
• r

e f e x i b l e h e u r i s t i c s t h a n p a t c h

• V

i s u a l i z e s a m b i g u i t i e s

• S

p

• t

s t r i v i a l c a s e s e a s i l y

• E

a s y c u s t

• m

i z a b l e r e

• r

u n

https://board.net/p/PatchPorting

G

• a

l

T

• h

a v e a p l a t f

• r

m w h e r e s e c u r i t y p a t c h e s a r e s h a r e d a n d a u t

• m

a t i c a l l y p

• r

t e d t

• d

i f e r e n t v e r s i

• n

s , a n d m u l t i p l e s t a k e h

• l

d e r s c a n d e f n e t

• g

e t h e r w h a t i s a g

• d

p a t c h a n d c

• n

s u m e s

• l

u t i

• n

s f r

• m
• t

h e r s .

https://board.net/p/PatchPorting

• I

m p r

• v

e p e r f

• r

m a n c e

• I

n t e g r a t i

• n

w i t h t h e t r a c k e r

○

I f t h a t ' s

• k

e y w i t h y

• u

: )

○

A Patch f e l d w

• u

l d h e l p

○

S S O f

• r

c u s t

• m

r u n s

R

• a

d ma p a n d P l a n s

https://board.net/p/PatchPorting

R

• a

d ma p a n d P l a n s

• B

e t t e r ( a n d m

• r

e ) c r a w l i n g f

• r

p a t c h e s ( e . g . f r

• m
• t

h e r d i s t r

• s

)

• A

d d P O C t e s t i n g ?

• I

n t e r f a c e i m p r

• v

e m e n t s

• M

a c h i n e l e a r n i n g ( ? )

• A

d d n e w a n d f a n c y h e u r i s t i c s

https://board.net/p/PatchPorting

https://board.net/p/PatchPorting

u s e

• f

i s

• mo

r p h i s ms

i f ( ! y ) i f ( y = = N U L L ) i f ( N U L L = = y )

https://board.net/p/PatchPorting

C a l l f

• r

c

• mme

n t s a n d c

• l

l a b

• r

a t i

• n
• E

v e r y t h i n g i s M I T l i c e n s e d

○

P a t c h c r a w l e r : n

• d

e . j s

○

T h e p a t c h e r : p y t h

• n
• A

d d p a t c h e s t

• t

h e s e c u r i t y t r a c k e r

• C

l e a r l y i d e n t i f y t h e C V E i d i n y

• u

r s e c u r i t y q u i l t p a t c h h e a d e r .