User:Yiannis - Revision history

Yiannis: Some 2014 risk engineering references

2014-12-28T17:04:55Z

Some 2014 risk engineering references

Yiannis: Updated short bio

2014-03-02T21:32:54Z

Updated short bio

Yiannis at 23:56, 3 October 2011

2011-10-03T23:56:25Z

Yiannis at 10:27, 21 October 2010

2010-10-21T10:27:06Z

Yiannis at 17:36, 20 October 2010

2010-10-20T17:36:08Z

Yiannis at 01:02, 20 September 2010

2010-09-20T01:02:34Z

Yiannis at 00:23, 20 September 2010

2010-09-20T00:23:26Z

Yiannis at 17:33, 6 September 2010

2010-09-06T17:33:28Z

Yiannis: Created page with 'There is a world of numbers, hiding behind letters, inside computers that stimulates the brain of Yiannis. Currently, he is focusing on research relating to coding standards, pra…'

2009-09-17T14:10:45Z

Created page with 'There is a world of numbers, hiding behind letters, inside computers that stimulates the brain of Yiannis. Currently, he is focusing on research relating to coding standards, pra…'

New page

There is a world of numbers, hiding behind letters, inside computers that stimulates the brain of Yiannis. Currently, he is focusing on research relating to coding standards, practices and ways of exploiting development code. This focus entails the breaking and making of client-side standalone, as well as server-side web applications.

For OWASP, Yiannis runs the JBroFuzz project, a tool that has had as an objective to provide a stable (cross-platform) functional fuzzing tool for web applications, over HTTP & HTTPS.

He has also contributed bits of code to other projects, such as DirBuster and co-authored a number of articles and publications, including v2 of the testing guide.

← Older revision		Revision as of 17:04, 28 December 2014
Line 1:		Line 1:
	There is a world of numbers, hiding behind letters, inside computers, this is what stimulates my work. I am currently employed in IT risk management within the financial industry, running a team of technical risk assessors. Prior to this, I spent 5 years in the world of professional penetration testing. I focused my career evolution on assisting large scale projects actually implement secure development practices. This included teaching developers how to write secure code. For OWASP, I was the project leader for JBroFuzz and used to chair the Global Industry Committee. I am on the Application Security Advisory Board of the (ISC)2. My academic qualifications include a [http://wrap.warwick.ac.uk/1193/ PhD in information security], designing routing protocols for ad-hoc networks. I am a certified scrum master and hold the CISSP certification.		There is a world of numbers, hiding behind letters, inside computers, this is what stimulates my work. I am currently employed in IT risk management within the financial industry, running a team of technical risk assessors. Prior to this, I spent 5 years in the world of professional penetration testing. I focused my career evolution on assisting large scale projects actually implement secure development practices. This included teaching developers how to write secure code. For OWASP, I was the project leader for JBroFuzz and used to chair the Global Industry Committee. I am on the Application Security Advisory Board of the (ISC)2. My academic qualifications include a [http://wrap.warwick.ac.uk/1193/ PhD in information security], designing routing protocols for ad-hoc networks. I am a certified scrum master and hold the CISSP certification.
		+
		+	'''Information Assurance: Risk Management & Risk Control'''
		+
		+	*2014 - ISC2 EMEA Congress [http://emeacongress.isc2.org/events/-isc-security-congress-emea-2014/custom-36-fab6fa4c21114b97b700ecf2b6b9bf01.aspx Risk Engineering]
		+	*2014 - ISC2 Security Congress Atlanta [https://congress.isc2.org/session/session-3248-building-agile-risk-assessment-program-keeping-pace-hackers Building an Agile Risk Assessment Program - Keeping Up with the Pace of Hackers]

	'''Application Security'''		'''Application Security'''

← Older revision		Revision as of 21:32, 2 March 2014
Line 1:		Line 1:
−	There is a world of numbers, hiding behind letters, inside computers ~~that~~ stimulates the ~~brain~~ of ~~Yiannis~~. ~~Currently, he is focusing on research relating~~ to ~~coding standards~~, ~~practices and ways~~ of ~~exploiting~~ development code. ~~This focus entails~~ the ~~breaking~~ and ~~making~~ of ~~client-side standalone~~, ~~as well as server~~-~~side web applications~~.	+	There is a world of numbers, hiding behind letters, inside computers, this is what stimulates my work. I am currently employed in IT risk management within the financial industry, running a team of technical risk assessors. Prior to this, I spent 5 years in the world of professional penetration testing. I focused my career evolution on assisting large scale projects actually implement secure development practices. This included teaching developers how to write secure code. For OWASP, I was the project leader for JBroFuzz and used to chair the Global Industry Committee. I am on the Application Security Advisory Board of the (ISC)2. My academic qualifications include a [http://wrap.warwick.ac.uk/1193/ PhD in information security], designing routing protocols for ad-hoc networks. I am a certified scrum master and hold the CISSP certification.

	'''Application Security'''		'''Application Security'''

← Older revision		Revision as of 23:56, 3 October 2011
Line 1:		Line 1:
	There is a world of numbers, hiding behind letters, inside computers that stimulates the brain of Yiannis. Currently, he is focusing on research relating to coding standards, practices and ways of exploiting development code. This focus entails the breaking and making of client-side standalone, as well as server-side web applications.		There is a world of numbers, hiding behind letters, inside computers that stimulates the brain of Yiannis. Currently, he is focusing on research relating to coding standards, practices and ways of exploiting development code. This focus entails the breaking and making of client-side standalone, as well as server-side web applications.
		+
		+	'''Application Security'''
		+
		+	*2011 - Web-Spa [http://code.google.com/p/web-spa/ Single Request Authorisation Web Knocking]
		+	*2011 - Port Knocking Web Implementations [http://www.portknocking.org/view/implementations Ideas for more ports]
		+	*2011 - Swiss Cyber Storm [https://www.swisscyberstorm.com/speakers/pavlosoglou.html Protecting Web Applications through Port Knocking]
		+	*2009 - WebGoat Off-By-One Lesson [http://webgoat.googlecode.com/svn-history/r436/trunk/webgoat/src/main/java/org/owasp/webgoat/lessons/OffByOne.java WebGoat Off-By-One Lesson Remains to be Published]

	'''OWASP Life in Bullets:'''		'''OWASP Life in Bullets:'''

@@ Line 7: / Line 7: @@
 *2010 - OWASP London [http://www.owasp.org/index.php/London#Thursday.2C_January_14th_2010 http://www.owasp.org/index.php/London#Thursday.2C_January_14th_2010]
 **Penetration Testing with Selenium
 '''Project Involvement'''

@@ Line 7: / Line 7: @@
 *2010 - OWASP London [http://www.owasp.org/index.php/London#Thursday.2C_January_14th_2010 http://www.owasp.org/index.php/London#Thursday.2C_January_14th_2010]
 **Penetration Testing with Selenium
 '''Contact'''
 Yiannis Pavlosoglou<br> yiannis@owasp.org<br>

@@ Line 1: / Line 1: @@
 There is a world of numbers, hiding behind letters, inside computers that stimulates the brain of Yiannis. Currently, he is focusing on research relating to coding standards, practices and ways of exploiting development code. This focus entails the breaking and making of client-side standalone, as well as server-side web applications.
 '''OWASP Life in Bullets:'''
-* 2010 - OWASP GitHub [[http://www.owasp.org/index.php/Category:OWASP_GitHub http://www.owasp.org/index.php/Category:OWASP_GitHub]]
+*2010 - Bletchley Park ISSA UK [http://www.issa-uk.org/newsletters/ISSANewsletterApril2010.pdf Hacking for Queen and Country]
-* 2010 - OWASP London [[http://www.owasp.org/index.php/London#Thursday.2C_January_14th_2010 http://www.owasp.org/index.php/London#Thursday.2C_January_14th_2010]]
+*2010 - OWASP GitHub [http://www.owasp.org/index.php/Category:OWASP_GitHub http://www.owasp.org/index.php/Category:OWASP_GitHub]
-** Penetration Testing with Selenium
+*2010 - OWASP London [http://www.owasp.org/index.php/London#Thursday.2C_January_14th_2010 http://www.owasp.org/index.php/London#Thursday.2C_January_14th_2010]
 '''Contact'''
-Yiannis Pavlosoglou<br>
+Yiannis Pavlosoglou<br> yiannis@owasp.org<br>

← Older revision		Revision as of 00:23, 20 September 2010
Line 4:		Line 4:

	* 2010 - OWASP GitHub [[http://www.owasp.org/index.php/Category:OWASP_GitHub http://www.owasp.org/index.php/Category:OWASP_GitHub]]		* 2010 - OWASP GitHub [[http://www.owasp.org/index.php/Category:OWASP_GitHub http://www.owasp.org/index.php/Category:OWASP_GitHub]]
		+	* 2010 - OWASP London [[http://www.owasp.org/index.php/London#Thursday.2C_January_14th_2010 http://www.owasp.org/index.php/London#Thursday.2C_January_14th_2010]]
		+	** Penetration Testing with Selenium

	'''Contact'''		'''Contact'''