IBM - Trusteer Rapport - Does IBM Intentionally Backdoor Machines?
44CON Information Security Conference via YouTube
Overview
Save Big on Coursera Plus. 7,000+ courses at $160 off. Limited Time Only!
Explore the security implications of IBM/Trusteer Rapport in this 36-minute conference talk from 44CON Information Security Conference. Delve into the potential risks associated with this security software, examining its code execution speed and various components. Analyze the Windows implementation, including RapportAegle.sys and the Rapport Bouncer. Investigate access control mechanisms and a specific vulnerability (CVE-2019-XXXX). Consider whether certain security issues might be intentional, and gain insights into the broader implications for system security and user trust.
Syllabus
Intro
About Me
Why is this still a decent topic?
Just how fast can Trusteer code?
The first of many
IBM Rapport - Windows
RapportAegle.sys
The Rapport Bouncer
Access Granted
OBJ_FORCE_ACCESS_CHECK NO
CVE-2019-XXXX
Intentional?
Taught by
44CON Information Security Conference