Scotland - Revision history

Swright75: Added February's event details

2020-01-15T21:37:56Z

Added February's event details

Swright75: /* Acknowledgements */

2019-10-24T19:55:53Z

‎Acknowledgements

Swright75: November event added

2019-10-24T19:51:28Z

November event added

Swright75: /* Past Events */

2019-09-19T16:45:29Z

‎Past Events

Swright75: Added details about second speaker.

2019-08-29T18:32:25Z

Added details about second speaker.

Swright75: /* Acknowledgements */

2019-07-26T10:34:31Z

‎Acknowledgements

Swright75: Added September event.

2019-07-26T10:17:05Z

Added September event.

Swright75: Added ticket details.

2019-04-25T10:18:47Z

Added ticket details.

Swright75: Added May event

2019-04-02T21:09:47Z

Added May event

Swright75: /* Acknowledgements */

2019-03-16T11:59:02Z

‎Acknowledgements

@@ Line 9: / Line 9: @@
 == Acknowledgements ==
-A big thank you to '''Delloite''' for hosting our upcoming November 2019 event. As well as providing the beer and pizza!
+A big thank you to '''PwC '''for hosting our upcoming February 2020 event. As well as providing the beer and pizza!
 == Upcoming Events ==
 Signup to the chapter [https://groups.google.com/a/owasp.org/forum/#!forum/scotland-chapter Google Group] to be informed of upcoming events.
 === '''Thursday, 21 November 2019''' ===
@@ Line 42: / Line 65: @@
 Bio: Colin Cassidy (@parttimesecguy) used to be a software engineer at GE for 15 years working on their Distribution Management System (DMS). He is currently atoning for all his software development sin as a senior security consultant with IOActive. Colin has performed a number of security audits for ICS operators including one of the UKs largest Distribution Network Operators, several windfarms, container ships, shipping terminals, and AMI/smart meter infrastructure. Colin has also presented and Blackhat and Defcon on vulnerabilities found in Industrial Ethernet Switches. In his spare time, he searches for spare time.
 === Thursday, 12 September 2019 ===

@@ Line 9: / Line 9: @@
 == Acknowledgements ==
-A big thank you to '''Ernst & Young''' for hosting our upcoming September 2019 event. As well as providing the beer and pizza!
+A big thank you to '''Delloite''' for hosting our upcoming November 2019 event. As well as providing the beer and pizza!
 == Upcoming Events ==

← Older revision		Revision as of 19:51, 24 October 2019
Line 14:		Line 14:

	Signup to the chapter [https://groups.google.com/a/owasp.org/forum/#!forum/scotland-chapter Google Group] to be informed of upcoming events.		Signup to the chapter [https://groups.google.com/a/owasp.org/forum/#!forum/scotland-chapter Google Group] to be informed of upcoming events.
		+
		+	=== '''Thursday, 21 November 2019''' ===
		+	'''Time''': 18:00 - 20:00 BST
		+
		+	'''Location''': Deloitte Offices, Saltire Court, 20 Castle Terrace, Edinburgh, EH1 2DB
		+
		+	Tickets: Tickets are available on eventbrite: https://www.eventbrite.co.uk/e/owasp-scotland-chapter-meeting-november-tickets-78186324401
		+
		+	=== Description ===
		+	The final OWASP Scotland Chapter meeting of 2019 will take place on Thursday the 21st of November. Many thanks to Deloitte, who has kindly offered to host this event for us. They will also be providing pizza and refreshments on the evening.
		+
		+	We have two great talks lined up for the OWASP Scotland community with Rob McElvanney on "Red Teaming: Simply the BEST" and Colin Cassidy giving us an insight into the "Adventures in the wacky world of control systems".
		+
		+	For attending this event you will be able to claim 2 CPE points.
		+
		+	=== Red Teaming: Simply the BEST ===
		+	'''Speaker''': Rob McElvanney, Deloitte
		+
		+	Using examples of real world attacks, Associate Director Rob McElvanney will discuss lessons learned from recent Red Team exercises, particularly within the CBEST and GBEST frameworks. This session will illustrate some of the methods used by advanced actors to achieve access, allowing them a foothold for lateral movement and privilege escalation. The session will also explore how organisations can improve their chances of defending against such adversaries.
		+
		+	=== Adventures in the wacky world of control systems ===
		+	'''Speaker''': Colin Cassidy
		+
		+	This talk is a grab bag of different ICS topics to give people a flavours of the challenges being faced. The focus will be primarily on the energy industry, but other ICS and critical infrastructure faces similar issues. We will briefly discuss control system changes over time, what caused those changes, what improvements (or not) that they brought. We will cover some real life findings and thoughts from the field, this will include some odd findings, commonly seen issues, and how mistakes can cause surprisingly kinetic problems!
		+
		+	More positively there are solutions and improvements, but a one-size-fits-all solution does not tend to work, even when dealing with very similar sites.
		+
		+	Bio: Colin Cassidy (@parttimesecguy) used to be a software engineer at GE for 15 years working on their Distribution Management System (DMS). He is currently atoning for all his software development sin as a senior security consultant with IOActive. Colin has performed a number of security audits for ICS operators including one of the UKs largest Distribution Network Operators, several windfarms, container ships, shipping terminals, and AMI/smart meter infrastructure. Colin has also presented and Blackhat and Defcon on vulnerabilities found in Industrial Ethernet Switches. In his spare time, he searches for spare time.

	== Past Events ==		== Past Events ==

@@ Line 14: / Line 14: @@
 Signup to the chapter [https://groups.google.com/a/owasp.org/forum/#!forum/scotland-chapter Google Group] to be informed of upcoming events.
 === Thursday, 12 September 2019 ===
@@ Line 35: / Line 37: @@
 After a year in which organisations have been rocked by a series of large-scale cybersecurity breaches and ongoing recriminations over state-sponsored interventions, EY’s Global Information Security Survey shows which areas were the key areas of focus or areas of investment for various sectors. It also outlines the top trends in the cyber world from a global perspective.
 === Thursday, 9 May 2019 ===

@@ Line 29: / Line 29: @@
 The purpose of this talk is to raise awareness for the potential problem, with some recommendations of tools and approaches which could help. Discussing past examples where backdoors have been placed into libraries, as well as discussing some of the difficulties to keeping libraries up to date.
-==== TBD ====
+==== EY Global Information Security Survey Results ====
-'''Speaker''': TBD
+'''Speaker''': Shriparna Ghosh
-TBD.
+EY runs a Global Information Security Survey (GISS) every year. Responses were collected from over 60 countries representing all industry sectors with more than 1400 participants.
 == Past Events ==

← Older revision		Revision as of 10:18, 25 April 2019
Line 19:		Line 19:

	'''Location''': PwC, 144 Morrison Street, Edinburgh, EH3 8EX		'''Location''': PwC, 144 Morrison Street, Edinburgh, EH3 8EX
		+
		+	'''Tickets''': Tickets are available on EventBrite (https://www.eventbrite.co.uk/e/owasp-scotland-chapter-meeting-may-tickets-59785884189)

	==== Deception, Confusion, Mistrust: Attacks and Defences ====		==== Deception, Confusion, Mistrust: Attacks and Defences ====

@@ Line 13: / Line 13: @@
 == Upcoming Events ==
-Signup to the chapter mailing list to be informed of upcoming events.
+Signup to the chapter [https://groups.google.com/a/owasp.org/forum/#!forum/scotland-chapter Google Group] to be informed of upcoming events.
-=== Past Events ===
+=== Thursday, 9 May 2019 ===
 === Thursday, 21 February 2019 ===