Prevent Business Logic Attacks using Dynamic Instrumentation
summary
Claims a working prototype that instruments running apps to push business events into an event stream, detects anomalies and pushes automated responses without a rebuild or deploy. Implementation details include language-specific hooks (easy in Ruby, bytecode tooling like Byte Buddy for Java), a small buffered worker thread to avoid latency, streaming backends such as Kafka/Kinesis/GCP, and analysis targets like Kibana or Splunk. Demo code is open source (Ruby) and suitable for testing; presented as practical but not production hardened.
AI-written summary · about
chapters (9)
- 0:00Start
- 5:19Let's define a function
- 7:13Application Performance Monitoring
- 15:29Architecting for performance
- 16:49How could this work?
- 18:03Analyze
- 19:06Respond
- 23:18How to solve it
- 25:29Example Open Source Project
related talks
51mSecurity Observability 101: Thinking Inside the Box!
23mUsing CD Events to Capture End to End Application Security Posture
52mAppSec at DevOps Speed and Portfolio Scale
40mObservability for All!
49mAppSensor: Real-Time Event Detection and Response
17mIdentify and solve security risks faster with Application Signals
22mDynamic Go Instrumentation for Production Environments
52mApplication Security at DevOps Speed and portfolio scale