Operating System Command Injection

Operating System (OS) Command Injection is a critical vulnerability that often affects security appliances and other IoT-like devices. However, as recent issues across multiple languages have shown, it may affect web applications and APIs across a wide range of applications. This video explains why OS command injection happens, and how to prevent it in common languages like Python.
About the Speaker
Dr. Johannes Ullrich is the Dean of Research for SANS Technology Institute, a SANS Faculty Fellow, and founder of the Internet Storm Center (DShield.org) which provides a free analysis and warning service to thousands of Internet users and organizations. He is the host of the SANS Internet Storm Center Daily Stormcast, a daily podcast that provides a brief 5-minute summary of current network security related events, and the co-author of SANS SEC522: Application Security: Securing Web Apps, APIs, and Microservices, www.sans.org/c...
SANS Cloud Security focuses the deep resources of SANS on the growing threats to The Cloud by providing training, GIAC certification, research, and community initiatives to help security professionals build, deploy and manage secure cloud infrastructure, platforms, and applications.
SANS Cloud Security Curriculum: www.sans.org/cloud-security
GIAC Cloud Security Certifications: www.giac.org/f...
LinkedIn: / sanscloudsec
Discord: www.sansurl.com/cloud-discord
Twitter: @SANSCloudSec