Vulnerability Classification in the SaaS Era

Explore vulnerability classification in the SaaS era through this 47-minute conference talk by Noam Liran at TROOPERS14. Delve into the challenges and security issues arising from the shift to cloud-based services, examining the impact on enterprise users, authentication methods, and data access. Learn about attack schemes, including "The Enemy Within" and "The Ice Dagger," and their implications for SaaS security. Analyze a case study on Office 365 and Office 2013, complete with a demo and discussion on patching strategies. Gain insights into SaaS vulnerability metrics and participate in a Q&A session to deepen your understanding of security in the modern cloud landscape.

Introduction
Why SaaS
Cloud
The Old World
Enterprise Users
Sectors
VPN Clients
Security Issues
Always Secure
Access Anywhere Data
Attack Scheme
Authentication
XAML
High Profile
Facebook
The Fix
The Enemy Within
The Ice Dagger
Background
Office 365
Office 2013
World
Case study
Demo
Patch
Critical vs Important
SaaS Vulnerability Metrics
Questions