|
|
(352 intermediate revisions by 5 users not shown) |
Line 1: |
Line 1: |
− | {{Chapter Template|chaptername=New Jersey|extra= The chapter leaders are: Professor Osama Eljabri, Thomas Brennan, Tom Ryan and Joe Bernik - contact 973-296-3862 if you have any questions.|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-newjersey|emailarchives=http://lists.owasp.org/pipermail/owasp-newjersey}}
| + | = OWASP Northern New Jersey = |
| | | |
− | == Meeting News ==
| + | <h2>[https://www.meetup.com/owaspnycnj/ https://www.owasp.org/images/8/82/Meetup_logo3.jpg] [https://www.meetup.com/owaspnycnj/ New Jersey Chapter] |
− | | |
− | '''OWASP NJ SEPTEMBER 25th MEETING''' [http://fs19.formsite.com/NJOWASP/form194214401/index.html RSVP]
| |
− | | |
− | '''WHEN:'''
| |
− | September 25th 2006 5:00pm - 9:00pm
| |
− | | |
− | '''WHERE:'''
| |
− | New Jersey Institute of Technology
| |
− | GITC Building 3rd Floor, University Heights Newark, New Jersey 07102-1982
| |
− | [http://www.njit.edu/about/visiting/driving.php DIRECTIONS]
| |
− | | |
− | '''EVENT SPONSORS'''
| |
− | Location Sponsor: [http://www.njit.edu New Jersey Institute of Technology]
| |
− | | |
− | '''Corporate Sponsors:''' [http://www.miragenetworks.com Mirage Networks]- to become a supporter call 973-296-3862
| |
− | | |
− | '''* CAFFEINE-ENRICHED TECH FUEL WILL BE SERVED + PIZZA *'''
| |
− | | |
− | ----
| |
− | | |
− | '''TOPIC A: ENDPOINT CONTROL'''
| |
− | This talk will focus on basic components/capabilities of controling the endpoints in the network and the developing standards that you should be aware of.
| |
− | Speaker: Larry Fermi
| |
− | | |
− | | |
− | '''TOPIC B: SESSION MANAGEMENT'''
| |
− | This talk will highlight of weaknesses in 3rd party
| |
− | token generation algorithms, session fixation and weaknesses in expiration.
| |
− | Speaker: James Landis
| |
− | | |
− | | |
− | '''TOPIC C: WIRELESS INSECURITY'''
| |
− | For enterprises with wireless LAN networks,as well as those without, Wi-Fi brings a new set of security threats that cannot be protected against by your current firewall and VPN security systems. This talk will cover a current wireless computer security vunerability attack vectors and provide a live demo of the problems and the hacks. Round table discussion will follow concerning risk mitigation of the issues for business and personal.
| |
− | Speaker: Anthony Paladino
| |
− | | |
− | | |
− | '''TOPIC D: OWASP LABRAT Project'''
| |
− | This talk will provide a update on LabRat Project= The first version Application Security Testing CD developed by project lead: Joshua Perrymon. Download the Alpha ISO and burn a copy [http://www.packetfocus.com/hackos LABRAT]. Be sure to bring it with you to the event.
| |
− | | |
− | Also covered will be a *NEW* Anonymous Browser, [http://torpark.nfshost.com TORPARK].
| |
− | | |
− | Speaker: Tom Brennan
| |
− | | |
− | <br> | |
− | <center><b> PLEASE RSVP FOR THIS EVENT </b> - [http://fs19.formsite.com/NJOWASP/form194214401/index.html RSVP]</center>
| |
− | | |
− | == Meeting News ==
| |
− | | |
− | '''OWASP NJ DECEMBER 7th MEETING'''
| |
− | | |
− | '''WHEN:'''
| |
− | December 7th 2006 5:30pm - 9:30pm
| |
− | | |
− | '''WHERE:'''
| |
− | ABN AMRO Bank
| |
− | 499 Washington Ave., (1st Floor) Jersey City, NJ 07310
| |
− | | |
− | '''EVENT SPONSORS'''
| |
− | Location Sponsor: [http://www.abnamro.com/com/about/about.jsp ABN AMRO]
| |
− | | |
− | '''Corporate Sponsors:''' [http://www.syngress.com/books/index.cfm Syngress Publishing], [http://www.checkpoint.com Checkpoint Systems], [http://www.spidynamics.com SPI Dynamics] & [http://www.sipera.com SIPERA], to become a supporter call 973-296-3862
| |
− | | |
− | ----
| |
− | | |
− | '''TOPIC A: THE RULES OF INFORMATION SECURITY HAVE CHANGED '''
| |
− | A view on current state of cyber warfare, counter-terrorism, communications and intelligence.
| |
− | | |
− | Speaker: Gunnery Sergeant M. Sedano Reynolds, United States Marine Corps
| |
− | | |
− | | |
− | '''TOPIC B: METASPLOIT FRAMEWORK AND BUFFER OVERFLOWS '''
| |
− | Got Root? This talk will cover the Open-Source Exploit Framework [http://www.metasploit.org/donate.html Metasploit] with how-to information and details on using it to exploit authorized systems. Learn tips, tricks
| |
− | | |
− | Speaker: Paul Battista
| |
− | | |
− | | |
− | '''TOPIC C: HACKING THE PAYMENT GATEWAY & EFFECTIVE COUNTERMEASURES'''
| |
− | Payment gateways give merchants the ability to perform real-time credit card and check authorizations from a website over the Internet. 0-day exploits in the wild will be revealed
| |
− | | |
− | Speaker: Tom Ryan
| |
− | | |
− | | |
− | '''TOPIC D: KARMA '''
| |
− | This presentation will discuss and demonstrate [http://www.theta44.org/karma/index.html KARMA ]an
| |
− | open-source assessment framework that demonstrates wireless risk with a modified wireless driver that responds as any network that a client may be looking for, a set of rogue services to capture client credentials, and client-side exploits. Dino will also provide insight into the vulnerabilities revealed in some wireless drivers such as the one demonstrated at BlackHat by David Maynor and Johnny Cache.
| |
− | | |
− | Speaker: Dino Dai Zovi
| |
− | | |
− | | |
− | '''TOPIC E: VOIP / IM - Zero-Day Oh My!!'''
| |
− | Voice-over-IP (VoIP) & Instant Messaging (IM), are critcal to todays fast moving businesses. This speaker will discuss VOIP in depth and explain how http and SIP are simular in design and attack vectors.
| |
− | | |
− | Speaker: Joey O'Day
| |
− | | |
− | | |
− | '''TOPIC F: INCIDENT RESPONSE '''
| |
− | After this meeting you will need to know it ;)
| |
− | | |
− | Our final speaker will cover 7-Things you need to know to respond to respond effectively to a computer security incident at your organization. Don't miss this one as a result of this meeting... this information will be very helpful.
| |
− | | |
− | Speaker: FBI Special Agent Tim O'Brien
| |
− | | |
− | | |
− | Unoffical XMas Party ;) ''' [http://www.dorrians.com/jc/priv.html DORRIANS]
| |
− | Just several doors down from the meeting is DORRIANS, take this time to raise a toast with your peers and plan OWASP talks, elections, locations and speakers for 2007'
| |
− | | |
− | <hr>
| |
− | | |
− | For any questions or to volunteer simply call 973-296-3862 to discuss.
| |