Belgium Events 2012 - Revision history

Thomas Herlea: Eliminated gap between navigation links and TOC.

2017-05-16T07:13:43Z

Eliminated gap between navigation links and TOC.

Thomas Herlea: Added non-transcluding navigation links.

2017-05-16T07:03:04Z

Added non-transcluding navigation links.

Thomas Herlea: Thomas Herlea moved page Belgium Previous Events 2012 to Belgium Events 2012: Made page title timeless

2017-05-11T10:42:47Z

Thomas Herlea moved page Belgium Previous Events 2012 to Belgium Events 2012: Made page title timeless

Thomas Herlea: Fixed typo in KRvW's name.

2013-04-05T12:32:21Z

Fixed typo in KRvW's name.

Dm-17 at 10:40, 18 February 2013

2013-02-18T10:40:56Z

Dm-17: Created page with "== Previous Meeting (26th of September 2012) in Ghent == === WHEN === 26th of September 2012 (18h00 - 21h00) === WHERE === Hosted by [http://www.pwc.be/ PWC]. Co-organiz..."

2013-02-18T10:37:33Z

Created page with "== Previous Meeting (26th of September 2012) in Ghent == === WHEN === 26th of September 2012 (18h00 - 21h00) === WHERE === Hosted by [http://www.pwc.be/ PWC]. Co-organiz..."

New page

== Previous Meeting (26th of September 2012) in Ghent ==

=== WHEN ===

26th of September 2012 (18h00 - 21h00)

=== WHERE ===

Hosted by [http://www.pwc.be/ PWC].

Co-organized with the [http://www.issa-be.org ISSA (Information Systems Security Association)]

Address: 
PWC Ghent (Wilson) - Club 
Wilsonplein 5G 
B - 9000 GENT 

Routemap: http://www.pwc.be/en/map/index.jhtml 

Parking facilities at the ''Ghent South station''. 

=== PROGRAM ===

The agenda:
*18h00 - 18h30: ''Welcome'' 
*18h30 - 19h30: '''Introducing the Smartphone Penetration Testing Framework''' (by Georgia Weidman, Bulb Security LLC) 
:As smartphones enter the workplace, sharing the network and accessing sensitive data, it is crucial to be able to assess the security posture of these devices in much the same way we perform penetration tests on workstations and servers. However, smartphones have unique attack vectors that are not currently covered by available industry tools. The smartphone penetration testing framework, the result of a DARPA Cyber Fast Track project, aims to provide an open source toolkit that addresses the many facets of assessing the security posture of these devices. We will look at the functionality of the framework including information gathering, exploitation, social engineering, and post exploitation through both a traditional IP network and through the mobile modem, showing how this framework can be leveraged by security teams and penetration testers to gain an understanding of the security posture of the smartphones in an organization. We will also show how to use the framework through a command line console, a graphical user interface, and a smartphone based app. Demonstrations of the framework assessing multiple smartphone platforms will be shown. 
:Georgia Weidman is a penetration tester, security researcher, and trainer. She holds a Master of Science degree in computer science, secure software engineering, and information security as well as holding CISSP, CEH, NIST 4011, and OSCP certifications. Her work in the field of smartphone exploitation has been featured in print and on television internationally. She has presented her research at conferences around the world including Shmoocon, Hacker Halted, Security Zone, and Bsides. Georgia has delivered highly technical security training for conferences, schools, and corporate clients to excellent reviews. Building on her experience, Georgia recently founded Bulb Security LLC a security consulting firm specializing in security assessments/penetration testing, security training, and research/development. She was awarded a DARPA Cyber Fast Track grant to continue her work in mobile device security. 
*19h30 - 19h45: ''Break'' 
*19h45 - 20h45: '''Why your security products suck...''' (by Joe McCray, StrategicSec) 
:Joe McCray will be demonstrating a series of advanced hacking techniques focused on the areas of IDS/IPS/Web Application Firewall Bypass, SRP bypass and several other ways to defeat popular security mechanisms. 
:Bring your laptop, and hack with him. Joe will bring a wireless access point and allow the attendees to play with the security products as well. 
:Let's hack!!!! 
*20h45 - 21h15: '''Discussion: pentesting, legal aspects''' (by Steven Wierckx , pstestware) 
:Steven will set the scope, everyone is invited for discussion. 
*21h15 - 21h45: ''Closing Drink'' 

=== REGISTRATION ===

Please register via [https://owasp-belgium-2012-09-26.eventbrite.com/ https://owasp-belgium-2012-09-26.eventbrite.com]

=== PRESENTATIONS ===

The slides are available online! 
*'''Owasp presentation''' ([https://www.owasp.org/images/0/03/Owasp_Belgium_update_2012-09-26.pdf PDF]) 

*'''Introducing the Smartphone Penetration Testing Framework''' (by Georgia Weidman, Bulb Security LLC) - ([https://www.owasp.org/images/3/32/Georgiawpreso.ppt PPT]) 

*'''Why your security products suck...''' (by Joe McCray, StrategicSec) ([https://www.owasp.org/images/9/96/JoeMcRay.zip ZIP]) 

*'''Pentesting Legal Aspects''' (Panel discussion by Steven Wierckx, PS Testware) ([https://www.owasp.org/images/9/94/PenTesting_-_legal_aspects_-_restyled.pptx PPT]) 

=== COVERAGE ===

Follow what they say about us... 
* [http://www.ihackforfun.eu/index.php?title=owasp-belgium-chapter-meeting-4&more=1&c=1&tb=1&pb=1 ihackforfun.eu]

@@ Line 5: / Line 5: @@
 Next year: [[Belgium Events 2013|2013]].
 </noinclude>
 == Previous Meeting (26th of September 2012) in Ghent ==

← Older revision		Revision as of 07:03, 16 May 2017
Line 1:		Line 1:
−	[[Belgium]] ~~events held in 2012~~	+	<noinclude>
		+	These are the 2012 events of the [[Belgium\|OWASP Belgium Chapter]].
		+
		+	Previous year: [[Belgium Events 2011\|2011]].
		+	Next year: [[Belgium Events 2013\|2013]].
		+	</noinclude>

	== Previous Meeting (26th of September 2012) in Ghent ==		== Previous Meeting (26th of September 2012) in Ghent ==

@@ Line 137: / Line 137: @@
 *19h00 - 20h00: '''Common iOS Pitfalls vs. OWASP's iGoat ([https://www.owasp.org/images/c/c3/Appsecusa2011-bechapterbyKen-owasptop10mobilerisks.pptx PPT])''' (by Ken van Wyk, KRvW Associates)<br>
 :In this session, Ken will spotlight and demonstrate several security "gotchas" in Apple's iOS platform (iPhone and iPad). He'll then introduce the OWASP iGoat tool and demonstrate how it can be used (and extended) to help train iOS coders. Like the other OWASP *Goat tools, iGoat is a great learning platform that can help iOS developers internalize the big issues they face in building bulletproof apps. Ken is the project leader for iGoat, and we're always looking for contributors.
-:'''KenKenneth R. van Wyk''' is an internationally recognized information security expert and author of the O’Reilly and Associates books, Incident Response and Secure Coding. Ken provides consulting and training services through his company, KRvW Associates, LLC (http://www.KRvW.com). Ken has 22 years experience as an IT Security practitioner in the academic, military, and commercial sectors. He has held senior and executive technologist positions at Tekmark, Para-Protect, Science Applications International Corporation (SAIC), the U.S. Department of Defense, Carnegie Mellon University, and Lehigh University.
+:'''Kenneth R. van Wyk''' is an internationally recognized information security expert and author of the O’Reilly and Associates books, Incident Response and Secure Coding. Ken provides consulting and training services through his company, KRvW Associates, LLC (http://www.KRvW.com). Ken has 22 years experience as an IT Security practitioner in the academic, military, and commercial sectors. He has held senior and executive technologist positions at Tekmark, Para-Protect, Science Applications International Corporation (SAIC), the U.S. Department of Defense, Carnegie Mellon University, and Lehigh University.
 *20h00 - 20h15: Break<br>
 *20h15 - 21h15: '''Access Control Design Best Practices ([https://www.owasp.org/images/8/84/Be_chapter_presentation_by_jim_manico_Access_Control_Pitfalls_v1.1.pptx PPT])''' (by Jim Manico, WhiteHat Security)<br>

@@ Line 1: / Line 1: @@
 == Previous Meeting (26th of September 2012) in Ghent ==
@@ Line 55: / Line 57: @@
 Follow what they say about us...<br>
 * [http://www.ihackforfun.eu/index.php?title=owasp-belgium-chapter-meeting-4&more=1&c=1&tb=1&pb=1 ihackforfun.eu]<br>

← Older revision	Revision as of 10:42, 11 May 2017
(No difference)