No Silver Bullet for Use-After-Free Flaws [VIDEO]

By Sean Michael Kerner  |  Posted September 22, 2014
 
here is no shortage of threats on the modern Internet and no shortage of vendors aiming to provide security solutions. One vendor,Bromium, employs a virtualization micro-visor to provide isolation and security. Bromium also actively researches security threats in a bid to make sure its own platform and the Internet at large is secure.
In a video interview with eSecurity Planet, Rahul Kashyap, chief security architect and head of Research at Bromium, explains his firm sees the greatest threat coming from end-users rather than the network, since the end-user is often where infection and exploitation begin.
One of the most prevalent forms of software flaws today is what is known as a use-after-free memory error. With use-after-free an attacker is able to use previously allocated memory space to launch an exploit.
 
 
eSecurityPlanet/ full article and video here/ http://www.esecurityplanet.com/network-security/no-silver-bullet-for-use-after-free-flaws-video.html