Databases as sophisticated attack infrastructure.
What it’s about
Forget basic SQL injection, deleting data or stealing information. We all know that already.
I explain how an attacker can use a database as part of their attack infrastructure:
- Databases as C2 (Command & Control)
- Advanced persistence through the database
- Lateral movement using database infrastructure
- Covert exfiltration
- Parallels with the evolution of malware
Why it’s relevant
Databases sit at the heart of every modern system, but hardly anyone thinks of them as an advanced attack vector.
The talk shows how a skilled attacker can use that infrastructure for attacks that go far beyond the usual.