Middleware hacking
- 2. Agenda • what is Middleware? • Vendors for Middleware? • Where it stands in a picture? • Types of Middleware? • Vulnerabilities in Middleware? • Importance of middleware patching?
- 3. What is Middleware ? What is Middleware? Middleware is the software that connects software components or enterprise applications. Middleware is the software layer that lies between the operating system and the applications on each side of a distributed computer network Typically, it supports complex, distributed business software applications. https://docs.oracle.com/cd/E15523_01/core.1111/e10103/intro.htm#BABEICDD Servers / Client This is middleware in my understanding..
- 5. Where Middleware stands in picture M I D D L E W A R E
- 6. Where Middleware stands in picture KERNEL Network OS Service Middleware Distributed Application
- 7. Types of Middleware? OBJECT Oriented Middleware RPC (remote procedure call) MOM Message oriented Middleware Event based Middleware
- 8. RPC (remote procedure call) http://p.motionelements.com/stock-video/nature/me705539-inside-mcdonald-s-restaurant-hd-a0252.jpg
- 9. RPC (remote procedure call) APPLICATION CALL(function) CLIENT STUB marshalling (network portable format) RPC RPC SERVER STUB unmarshalling Function execute and result PROS * Distributed application * can call any function from anywhere CONS • Platform Dependent • Language Dependent RPC
- 10. RPC call Live Example RPC
- 11. OBJECT Oriented Middleware (ORB) CORBA The Common Object Request Broker Architecture
- 12. OBJECT Oriented Middleware (ORB) CORBA The Common Object Request Broker Architecture BY OMG Group PROS • Platform Independent • Language Independent • ORB :- Object request broker • IIOP :- internet inter operable protocol. APPLICATION CALL(function) CLIENT STUB ORB ORB Skeleton Function execute and result IIOP :- internet inter operable protocol. IDL
- 13. Live Example ORB
- 14. COM/DCOM PROS • MSIDL:- Microsoft IDL • DCE-RCP :-distributed computing Env-R. CLIENT Proxy COM runtime lib in windows NT COM runtime lib in windows NT STUB Function execute and result DCE-RPC Component object module and distributed component Object Module MSIDL
- 15. Enterprise JAVA Bean JAVA RMI (Remote Method Invocation) PROS • Platform Independent • JAVA RMI . WEB Browser WEB APP RMI registry/ JVM RMI registry/ JVM JDBC DATABASE IDL RMI-IIOP
- 16. Vulnerabilities in Middleware ISSUES • OVERFLOWS • WEB Application TOP 10 • Architecture flow • Say No to Scanner’s
- 17. Importance of middleware patching?
- 18. Thank You…!