The incident of a spaceship being destroyed due to a bug in the code led to the development of software engineering as a discipline focused on designing reliable software.
Maddie Stone's work at Google Project Zero involves analyzing and patching actively exploited zero-day vulnerabilities to improve security measures and safeguard users.
Deep dives
The Emergence of Software Engineering
Software engineering came into existence in the 1950s during NASA's space missions. Initially, there were no software engineers, but as technology advanced, the need for software engineering became apparent. An incident in the 1960s, where a spaceship was destroyed due to a bug in the code, led to the realization that reliable software was essential. This incident sparked the development of software engineering as a discipline, with a focus on designing, developing, and testing computer software.
Maddie Stone's Journey into Security Research
Maddie Stone, a security researcher at Google Project Zero, combines her passion for reverse engineering and cybersecurity to uncover actively exploited zero-day vulnerabilities. She began her career working on firmware and hardware reverse engineering before joining Google's Android security team. Her role now involves analyzing malware, finding vulnerabilities, and working on securing Android devices from attacks, particularly those from pre-installed malware or non-Google Play apps.
The Impact of Malware on Android Devices
Maddie Stone focuses on finding and mitigating malware targeting Android devices. Android malware, such as the Gin Master virus, is often distributed through deceptive apps that trick users into installation. Once infected, the malware can steal private data and compromise the device's security. Maddie's work involves reverse engineering and analyzing these malware samples to detect and protect Android users from such threats.
Maddie Stone's Role in Zero-Day Vulnerability Research
As part of Google Project Zero, Maddie Stone specializes in analyzing and patching zero-day vulnerabilities actively exploited in the wild. The goal is to make zero days harder to create and use by attackers. By identifying and reporting zero days to vendors, she helps develop fixes and mitigations to safeguard users. Maddie's work highlights the importance of continually improving security measures to minimize the impact of zero-day exploits.
Maddie Stone is a security researcher for Google’s Project Zero. In this episode we hear what it’s like battling zero day vulnerabilities.
Sponsors
Support for this show comes from Zscalar. Zscalar zero trust exchange will scrutinize the traffic and permit or deny traffic based on a set of rules. This is so much more secure than letting data flow freely internally. And it really does mitigate ransomware outbreaks. The Zscaler Zero Trust Exchange gives YOU confidence in your security to feel empowered to focus on other parts of your business, like digital transformation, growth, and innovation. Check out the product at zscaler.com.
Support for this show comes from Thinkst Canary. Their canaries attract malicious actors in your network and then send you an alert if someone tries to access them. Great early warning system for knowing when someone is snooping around where they shouldn’t be. Check them out at https://canary.tools.