BSidesATL 2018 - Oh the POSsibilities (Anthony Sasadeusz and Fabius Watson)
Channel: BSidesATL
Date: 2020-03-28

In this presentation, we will share our Point-of-Sale security research which has revealed a multitude of concerns regarding the secure development of payment applications. We plan to discuss our analysis of several PA-DSS validated applications for security vulnerabilities and configuration issues. Next, we will cover our implementation of a proof-of-concept attack chain that demonstrates the capabilities an attacker could leverage in a vulnerable scenario. Finally, we will discuss the process of vulnerability discovery, development of attacker capabilities, as well as defensive countermeasures.

Anthony is a security researcher at VerSprite Security. He is currently focused on hardware communications, exploitation and reverse engineering. Before coming to work for VerSprite, Anthony competed in various CTFs with the University of Maryland Baltimore County (UMBC) CyberDawgs team, which is where he earned his B.S. in Computer Science. This is also where his interest in offensive computer security blossomed.

Fabius is a Security Researcher at VerSprite Security. He is ambitious about reverse engineering, vulnerability research, exploit development, and post-exploitation. Both his previous work as a Network Security Analyst and his Red Team knowledge provide him with a distinct perspective for examining technologies for real-world threats.