Hijacking the Java Virtual Machine (JVM) and Bypassing Runtime Application Self-Protection (RASP)

Runtime Application Self-Protection (RASP) is a security technology introduced by Gartner in 2012, that offers an additional layer of security by monitoring applications in real-time to detect suspicious activity. Unlike conventional security mechanisms, such as WAF and AV/EDR, RASP is integrated within the application, enabling it to closely monitor the application’s runtime environment and identify anomalies that may signal an attack. In this talk, we will explore how one can bypass RASP solutions, particularly for JVM-based applications.