PostgreSQL Threats and Attacks in the Wild

Explore PostgreSQL security threats and attacks in this 22-minute conference talk from BSidesSF 2018. Discover the findings from two custom-developed PostgreSQL honeypots: pghoney (low-interaction) and Sticky Elephant (medium-interaction). Learn about exploits, malware, and brute force attacks observed in the wild. Gain insights into the development process of these honeypots and their integration with MHN & HPFeeds. Presented by AJ Bahnken and Forrest Fleming, this talk offers valuable information for database administrators, security professionals, and anyone interested in PostgreSQL vulnerabilities and defense strategies.

BSidesSF 2018 - PostgreSQL Threats and Attacks in the Wild (AJ Bahnken • Forrest Fleming)