Prevoty is dedicated to securing enterprises and the users they serve by monitoring and protecting the applications that are the heart of modern business. By using a LANGSEC-based approach to accurately analyze attacks from inside production applications, Prevoty’s products provide real-time application security intelligence and RASP (Runtime Application Self-Protection). These capabilities enable Global 2000 enterprises to dramatically improve remediation of vulnerabilities, enabling security and development teams to work together more effectively, even with agile release cycles. Prevoty was founded in 2013 and is headquartered in Menlo Park, California.
Signatures are Dead: Time to get Fluent in Language Security
Gone are the days of signatures, definitions, pattern matching, regular expressions or taint analysis. Once solely the obscure domain of compiler geeks, Language Security, a.k.a. LANGSEC, is a new approach and has gained a lot of traction as a much more robust, scalable and enterprise-friendly approach to securing production applications at runtime. This session will begin by pointing out the flaws and limitations of popular application security models and will then provide an easy-to-follow introduction to the runtime LANGSEC philosophy, how it can solve vulnerability classes that arise from user input and better align security with DevOps.
What You’ll Learn
- A brief explanation of LANGSEC and its use for protecting production applications
- How LANGSEC can understand intent and eliminate attacks that arise from user input changing the expected behavior of an application
- Discuss the actions that can be taken based on this intelligence to make existing security infrastructure more effective
Prior to starting Prevoty, a runtime application security platform, Kunal was the Director of Technology at the BBC Worldwide, overseeing global engineering and operations. Kunal also has several years of experience leading security, data and engineering at Gravity, MySpace and NASA’s Jet Propulsion Laboratory.