Network Security, Vulnerability Management

VIDEO: Web servers running on HTTP/2 found with multiple denial-of-service vulnerabilities

Bradley BarthAugust 5, 2016

In an analysis of five separate manufacturers' web servers running on the new HTTP/2 protocol, cybersecurity firm Imperva found that all five were vulnerable to at least one of four high-profile denial-of-service vulnerabilities. The company announced its findings at Black Hat, where SCMagazine.com caught up with Imperva's director of security research Itsik Mantin.

According to Mantin, it's not uncommon for technology manufacturers to experience some bumps in the road while adopting brand new protocols, but such unfortunate developments must not deter their progress.

Imperva's researchers studied server implementations from Apache, Microsoft, NGINX, Jetty and nghttp2. For more details, watch the video.

Bradley Barth

As director of multimedia content strategy at CyberRisk Alliance, Bradley Barth develops content for online conferences, webcasts, podcasts video/multimedia projects — often serving as moderator or host. For nearly six years, he wrote and reported for SC Media as deputy editor and, before that, senior reporter. He was previously a program executive with the tech-focused PR firm Voxus. Past journalistic experience includes stints as business editor at Executive Technology, a staff writer at New York Sportscene and a freelance journalist covering travel and entertainment. In his spare time, Bradley also writes screenplays.