This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Long Island"

From OWASP
Jump to: navigation, search
m (Updated the directions for attendees once they are onsite. -RCB- 6/25/2009)
Line 4: Line 4:
 
<p style="margin:0; background:#cef2e0; font-size:120%; font-weight:bold; border:1px solid #a3bfb1; text-align:left; color:#000; padding:0.2em 0.4em; ">Scroll down to see the upcoming Long Island OWASP events</p>  
 
<p style="margin:0; background:#cef2e0; font-size:120%; font-weight:bold; border:1px solid #a3bfb1; text-align:left; color:#000; padding:0.2em 0.4em; ">Scroll down to see the upcoming Long Island OWASP events</p>  
  
−
<b>Date:</b>  Saturday June 27th 2009<br>
+
<b>Date:</b>  TBD<br>
−
<b>Time:</b>  10:00-14:00<br>
+
<b>Time:</b>  11:00-14:00<br>
 
<b>Place:</b>  Sunrise Business Center, 3500 Sunrise Hwy, Great River, NY 11730, Building 200 [http://maps.google.com/maps?f=q&source=s_q&hl=en&geocode=&q=3500+Sunrise+Hwy,+NY,+Great+River,+NY,+Building+200&sll=40.748249,-73.163388&sspn=0.009298,0.022745&ie=UTF8&ll=40.748249,-73.163388&spn=0.009298,0.022745&t=h&z=16&iwloc=A MAP]<br>
 
<b>Place:</b>  Sunrise Business Center, 3500 Sunrise Hwy, Great River, NY 11730, Building 200 [http://maps.google.com/maps?f=q&source=s_q&hl=en&geocode=&q=3500+Sunrise+Hwy,+NY,+Great+River,+NY,+Building+200&sll=40.748249,-73.163388&sspn=0.009298,0.022745&ie=UTF8&ll=40.748249,-73.163388&spn=0.009298,0.022745&t=h&z=16&iwloc=A MAP]<br>
 
<b>Directions:</b>  Enter from the service road on the East Bound side of Sunrise Hwy.  Turn right after passing the security gate.  Attendees can park in front of Building 200 and enter through the Building 200 entrance.  We must ask that all attendees do not park in any spot marked as RESERVED.  Once you enter building 200, pass through security, turn right and head down the hall, pass through the first set of doors.  Our conference room is your first right.  There will be signs posted along this path directing attendees to the room.<br>
 
<b>Directions:</b>  Enter from the service road on the East Bound side of Sunrise Hwy.  Turn right after passing the security gate.  Attendees can park in front of Building 200 and enter through the Building 200 entrance.  We must ask that all attendees do not park in any spot marked as RESERVED.  Once you enter building 200, pass through security, turn right and head down the hall, pass through the first set of doors.  Our conference room is your first right.  There will be signs posted along this path directing attendees to the room.<br>
Line 11: Line 11:
 
<br>
 
<br>
 
<u>Agenda:</u><br><br>
 
<u>Agenda:</u><br><br>
−
;10-00 - Opening Remarks & Welcome to [http://www.owasp.org/images/9/9f/2009-OWASP_KeyNote-V2.pdf OWASP Foundation]
+
;11-00 - Opening Remarks & Welcome to [http://www.owasp.org/images/9/9f/2009-OWASP_KeyNote-V2.pdf OWASP Foundation]
 
:--'''Helen Gao, OWASP LI Board   
 
:--'''Helen Gao, OWASP LI Board   
−
;10-20 - Incident Response - Identify, Contain, Eradicate, Recover, Lessons Learned
+
;11-20 - Attacking VoIP With The OWASP Top 10
−
:Breaches happen.  Proper audit compliance enables an organization the ability to detect and prevent attacks.  A case study will be examined.
+
:VoIP systems allow for cheap and easy telephony communication.  How can an attacker 0wn your PBX with the OWASP Top 10? Proof of concept 0day attacks will be demonstrated and detailed.
−
:--'''[http://www.linkedin.com/pub/ryan-behan/9/746/a12 Ryan Behan] Manager of Network Technologies at [http://www.ntst.com/ Netsmart Technologies]
 
−
;11-20 - Code Blue - The Unhealthy State of Your Medical Records (And What Can Be Done to Save Them)
 
−
:Millions of patient records have been disclosed to unauthorized third parties.  Some of these records were stolen, some were lost yet all could have been prevented.
 
−
 
 
−
:A North Carolina hospital loses a laptop with 14,000 records.  The Peninsula Orthopedic Associates lost backup tapes that help 100,000 patient records.  The Wallgreens Health Initiative emailed 28,000 records to the state of Kentucky without using encryption.  Confiker infects three University of Utah hospitals.  Kaiser fires 15 employees for inappropriately accessing medical records.  Two Scottish hospitals were infected by a computer worm.  Researchers find 20,000 medical records using peer-to-peer software.  The Mytob worm infects 4,700 computers at three UK hospitals.  Confiker infects 8,000 computers at the Sheffield Teaching Hospitals Trust.  Criminals tried to extort Express Scripts with the threat of releasing millions of patient records.  SRA International was breached when malicious software allowed an attacker the ability to access patient data maintained by SRA. The list goes on.
 
−
 
 
−
:All of these incidents were reported in the news within a five month period of each other.  News like this is being reported with an increasing frequency. 
 
−
 
 
−
:Most of these incidents could have been easily avoided by conducting compliance audits and vulnerability assessments.
 
−
 
 
 
:--'''[http://www.linkedin.com/in/blakecornell Blake Cornell] Security Consultant [http://www.net2s-us.com/ Net2S/BT-INS], OWASP NY/NJ/LI Board Member
 
:--'''[http://www.linkedin.com/in/blakecornell Blake Cornell] Security Consultant [http://www.net2s-us.com/ Net2S/BT-INS], OWASP NY/NJ/LI Board Member
  
Line 30: Line 20:
 
:
 
:
  
−
;12-25 - Education, "So you want to train an army of ninjas..." - Teaching offensive techniques to college students
+
;12-20 - TBD
−
:Dan will discuss the challenges, successes, surprises, and lessons learned creating and delivering a penetration testing course for undergraduate and graduate students at NYU:Poly. The course, which ran on-campus during the Fall 2008 semester, was taught to 30 students and with the help of 5 instructors from outside the university: After 6 weeks, students were given a takehome midterm that tested their ability to apply theoretical techniques discussed in class and that tracked the evolution of their "hacker's mindset." This talk presents lessons learned as "design patterns" that conference attendees can apply to their own courses to increase their effectiveness and train their own army of ninjas in a university setting. Additionally, all course material, videotaped lectures, and student work from the Fall 2008 NYU:Poly Penetration Testing and Vulnerability Analysis course have been made freely available online at: [http://pentest.cryptocity.net/]
+
:--TBD
−
 
+
;13-20 - TBD
−
:--'''[http://cryptocity.net Dan Guido], Board Member OWASP NYNJ
+
:--TBD
−
;13-25 - Round Table Discussion - Successes, challenges, efforts, hopes and predictions for OWASP Long Island
 
−
:--'''[http://www.linkedin.com/in/helengao Helen Gao], Board Member, OWASP LI
 
−
:--'''[http://www.linkedin.com/pub/ryan-behan/9/746/a12 Ryan Behan], Board Member, OWASP LI
 
−
:--'''[http://www.linkedin.com/in/blakecornell Blake Cornell], Board Member, OWASP NYNJ/LI
 
−
:--'''[[User:Dguido|Dan Guido]], Board Member OWASP NYNJ
 
  
  
  
−
AFTER EVENT NETWORKING ON THE WATER !!
+
AFTER EVENT NETWORKING ON THE WATER!!
  
 
'''[http://maps.google.com/maps?f=d&source=s_d&saddr=3500+Sunrise+Hwy,+Great+River,+NY+11739&daddr=445+Vanderbilt+Blvd,+Oakdale,+NY+11769-2009&hl=en&geocode=%3BFTN1bQIdVfuj-w&gl=us&mra=ls&sll=40.727859,-73.139371&sspn=0.011155,0.027938&ie=UTF8&ll=40.737925,-73.149204&spn=0.022307,0.055876&t=h&z=15 THE WHARF]
 
'''[http://maps.google.com/maps?f=d&source=s_d&saddr=3500+Sunrise+Hwy,+Great+River,+NY+11739&daddr=445+Vanderbilt+Blvd,+Oakdale,+NY+11769-2009&hl=en&geocode=%3BFTN1bQIdVfuj-w&gl=us&mra=ls&sll=40.727859,-73.139371&sspn=0.011155,0.027938&ie=UTF8&ll=40.737925,-73.149204&spn=0.022307,0.055876&t=h&z=15 THE WHARF]

Revision as of 18:51, 27 July 2009

OWASP Long Island

Welcome to the Long Island chapter homepage.


Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

Btn donate SM.gif to this chapter or become a local chapter supporter. Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member? Join Now BlueIcon.JPG


Chapter Meetings

Scroll down to see the upcoming Long Island OWASP events

Date: TBD
Time: 11:00-14:00
Place: Sunrise Business Center, 3500 Sunrise Hwy, Great River, NY 11730, Building 200 MAP
Directions: Enter from the service road on the East Bound side of Sunrise Hwy. Turn right after passing the security gate. Attendees can park in front of Building 200 and enter through the Building 200 entrance. We must ask that all attendees do not park in any spot marked as RESERVED. Once you enter building 200, pass through security, turn right and head down the hall, pass through the first set of doors. Our conference room is your first right. There will be signs posted along this path directing attendees to the room.

RSVP REQUIRED Register.gif


Agenda:

11-00 - Opening Remarks & Welcome to OWASP Foundation
--Helen Gao, OWASP LI Board
11-20 - Attacking VoIP With The OWASP Top 10
VoIP systems allow for cheap and easy telephony communication. How can an attacker 0wn your PBX with the OWASP Top 10? Proof of concept 0day attacks will be demonstrated and detailed.
--Blake Cornell Security Consultant Net2S/BT-INS, OWASP NY/NJ/LI Board Member
12-10 - Lunch
12-20 - TBD
--TBD
13-20 - TBD
--TBD


AFTER EVENT NETWORKING ON THE WATER!!

THE WHARF

445 Vanderbilt Blvd, Oakdale, NY 11769

Come prepared for a day of networking with your industry peers.
We invite all attendees to food and libations after the meeting at a local restaurant TBA.
If you join our mailing list, then you will receive details of the meeting as soon as they are finalized.
To be a co-sponsor for this or a future meeting consider annual chapter sponsorship

Chapter Leaders/Contacts


External Links

Retrieved from "https://wiki.owasp.org/index.php?title=Long_Island&oldid=66687"