OGD15 Speakers - Revision history

Mfalkvidd: /* Bio */

2016-03-08T18:11:49Z

‎Bio

2015-12-07T12:21:23Z

‎Abstract

2015-12-04T21:06:24Z

‎Abstract

2015-12-04T21:04:52Z

‎Bio

2015-12-03T23:49:16Z

‎Abstract

2015-12-03T23:46:51Z

‎Bio

2015-12-03T19:58:40Z

2015-12-03T19:58:02Z

‎Martin Knobloch

2015-12-03T19:57:13Z

‎Rikard Bodforss

2015-12-03T19:56:39Z

‎Martin Johns

@@ Line 44: / Line 44: @@
 == Bio ==
-Marie Moe is passionate about incident handling and information sharing, she cares about public safety and securing systems that may impact human lives, this is why she has joined the grassroots organisation “I Am The Cavalry”. Marie is a research scientist at SINTEF ICT, and has a Ph. D. in information security. She has experience as a team leader at NorCERT, the Norwegian national CERT. Marie also teaches a class on incident management and contingency planning at Gjøvik University College in Norway. Marie loves to break crypto protocols, but gets angry when its in her own body.
+Dr. Marie Moe is passionate about incident handling and information sharing, she cares about public safety and securing systems that may impact human lives, this is why she has joined the grassroots organization “I Am The Cavalry”. Marie is a research scientist at SINTEF ICT, and has a Ph. D. in information security. She has experience as a team leader at NorCERT, the Norwegian national CERT. Marie also teaches a class on incident management and contingency planning at Gjøvik University College in Norway. Marie loves to break crypto protocols, but gets angry when its in her own body.
 == Title ==

@@ Line 85: / Line 85: @@
 == Abstract ==
 Rikard will guide you through the basics of a forensic investigation from acquisition to triage analysis, using open source or free tools. The workshop will be based on a scenario where we will go through the steps of an investigation from planning to report writing. The level of the workshop is aimed at an audience with limited (no) experience in forensics, but with a good understanding of computers, hardware and operating systems. After the workshop you will know how to handle the most critical part of an investigation, the acquisition, and how to proceed from there.
-IMPORTANT: Bring a laptop with Windows 7 installed (or a virtual host with Windows 7 on an OS of your choice)
+IMPORTANT: Bring a laptop with Windows 7 installed (or a virtual host with Windows 7 on an OS of your choice). Install VMware player. Also 2 USB sticks or USB HDD 8 GB+. Optional: Bring a "Victim drive" (your spouse's, colleague's, best friend's, enemy's) to analyze.
 = Martin Knobloch (@knoblochmartin) =

@@ Line 99: / Line 99: @@
 == Abstract ==
-<TBA>
+The OWASP Security Knowledge Frwamework
 https://www.owasp.org/index.php/OWASP_Security_Knowledge_Framework

@@ Line 90: / Line 90: @@
 == Bio ==
-<TBA>
+Martin is an independent security consultant and owner of PervaSec (http://www.pervasec.nl). His main working area is (software) security in general, from awareness to implementation. In his daily work, he is responsible for education in application security matters, advise and implementation of application security measures.
 == Title ==

@@ Line 84: / Line 84: @@
 == Abstract ==
-<TBA>
+Rikard will guide you through the basics of a forensic investigation from acquisition to triage analysis, using open source or free tools. The workshop will be based on a scenario where we will go through the steps of an investigation from planning to report writing. The level of the workshop is aimed at an audience with limited (no) experience in forensics, but with a good understanding of computers, hardware and operating systems. After the workshop you will know how to handle the most critical part of an investigation, the acquisition, and how to proceed from there.
 = Martin Knobloch (@knoblochmartin) =

@@ Line 56: / Line 56: @@
 This talk will be focused on the problem that we have these life critical devices with vulnerabilities that can’t easily be patched without performing surgery on patients, my personal experience with being the host of such a device, and how the hacker community can proceed to work with the vendors to secure the devices.
 = Martin Johns (@datenkeller) =
@@ Line 113: / Line 97: @@
 https://www.owasp.org/index.php/OWASP_Security_Knowledge_Framework
 Back to [[OWASP Gothenburg Day 2015]]

@@ Line 90: / Line 90: @@
 To systematically investigate the issue, we conducted a study on its prevalence in a set of 150 top-ranked domains, in which we observed that a third of the examined sites utilize dynamic JavaScript. Using our attack techniques, we able to leak sensitive data from more than 80% of these sites via remote script inclusion. In the talk we will present the study in general, and the most interesting cases in detail, showing the wide range of possible attack variations along with a bag of tricks how the including page can be prepared to efficiently leak a script's secrets. Furthermore, we present an efficient detection mechanism, in the form of a browser extension, as well as defensive measure, which enable robust protection.
-= Rikard Bodforss =
+= Rikard Bodforss (@rbodforss) =
 == Bio ==

@@ Line 73: / Line 73: @@
 https://www.owasp.org/index.php/OWASP_Security_Shepherd
-= Martin Johns =
+= Martin Johns (@datenkeller) =
 == Bio ==