Difference between revisions of "OWASP Bucharest AppSec Conference 2017 Workshops"

Workshop

In particular, participants will learn how to:

• Explain the need for secure coding Follow fundamental secure coding guidelines
• Validate and sanitize data
• Securely deserialize Java streams
• Securely implement exception handling
• Predict how the numerical types behave in Java
• Avoid pitfalls in the use of characters and strings
• Securely process input and output

Moreover, the course encourages programmers to adopt security best practices and develop a security mindset that can help protect software from tomorrow’s attacks, not just today’s.
Intended audience: The course is designed primarily for Java SE 8 developers but should also be useful to developers using older versions of the SE platform as well as Java EE and ME developers.
Skill level: The course assumes basic Java programming skills but does not assume an in-depth knowledge of software security.
Requirements:laptop with Java 8 and an IDE installed

Seats available: 20 (first-come, first served)
Price: 1200 euros/person
Register here

The agenda includes the following, typically between 1-2 hours per topic: Evidence acquisition

• Methodology for acquisition (leave no trace)
• Media types
• Hashing and verification
• Physical vs Logical
• Standard Imaging Process
• Special cases (RAID, etc.)
• Open Source tools and overview (Windows / Linux)

Hard Disk Forensics Part 1

• File System Types; Forensic Analysis Tools; Forensic areas of interest

Hard Disk Forensics Part 2 * Registry Analysis: Key locations and format, Forensic areas of interest, NTUSER.DAT, Regripper, Regdecoder

       * Automated Tools

Memory forensics

• Open Source tools and overview
• Memory Acquisition
• Memory analysis with Volatility: Processes: Network Connections, User names / Passwords, Encryption Keys, Registry Hives, Malware

Log Analysis Techniques

• Common log sources
• Local vs Centralized Logging
• Retention
• Tampering
• Log analysis tools and techniques

Forensic Timeline Creation and Analysis

• Log2Timeline

Data Recovery Techniques

• Manual data carving
• Automated tools

Malware Analysis

• Open Source Intelligence Gathering
• Malware Sandboxing and evasion techniques
• File Whitelisting

Advanced Persistent Threat

• What an APT really is
• Case Study - Operation Cleaver

Anti Forensics

• Data shredding
• Steganography
• Timestamp modification

Intended audience: Security minded individuals with basic level knowledge of linux operating systems.
Outcome: Attendees will gain critical knowledge on how to appropriately triage, and contain an incident using up to date methodology and suggestions from a trainer with extensive background in real world attacks. In addition, several tips and tricks to build and maintain an effective IR team will be provided.
Requirements:laptops for attendees, virtual box installed

Seats available: 20 (first-come, first served)
Price:1200 euros/person
Register here

Outcome:

Intended Audience:
Requirements:

Seats available: 20 (first-come, first served)
Price: 200 euros/person
[Registration link: TBD]

Outcome: Intended Audience:

Skill Level:
Requirements:

Seats available: 20 (first-come, first served)
Price: 200 euros/person
[Registration link: TBD]