Difference between revisions of "SecurityByte and OWASP Asia AppSec Conference 2009"

9:00AM   - 10:30AM</td>

Keynote Sessions</td> </tr>

10:30AM - 11:00AM</td>

Tea break & Snacks on Exhibition Floor</td> </tr>

11:00AM - 12:00PM</td>

TBD</td>

IBM</td>

 </td>

How To Blackbox Test Almost Anything</td>

Aviram Jenik, Beyond Security</td>

 </td>

The International State of Cyber Security, Risk reduction in a high threat world</td>

Howard A. Schmidt, Former Cyber Security Advisor to the White house</td> </tr>

12:00PM - 1:00PM</td>

Reconsidering Network Defenses or NOT !</td>

Cedric Blancher, EADS Innovation Works</td>

Lust 2.0 – Desire for free WiFi and the threat of the Imposter </td>

Lava Kumar Kuppan, Independent Security Researcher</td>

Applications - The new cyber security frontier</td>

Mano Paul, Software Assurance Advisor (ISC)2</td> </tr>

1:00PM    - 2:00PM</td>

Lunch</td> </tr>

2:00PM    - 3:00PM</td>

Exploiting Firefox Extensions</td>

Roberto Suggi Liverani, Security-Assessment.com</td>

 </td>

Threat Modeling </td>

Varun Sharma, Microsoft Corp.</td>

 </td>

Behind the scenes at the Microsoft Security Response Center</td>

Dave Midturi and Suresh Venkateswaran, Microsoft Security Response Center</td> </tr>

3:00PM    - 4:00PM</td>

SQL Server Forensics 2.0</td>

Kevvie Fowler, TELUS & Ringzero</td>

Vbootkit 2.0: Attacking Windows 7 Via Boot Sectors</td>

Nitin Kumar/Vipin Kumar, Independent Security Researchers, Nvlabs</td>

Business Case-Risk Management/Compliance at leading Education Group at AMITY</td>

Dr J.S Sodhi, AMITY</td> </tr>

4:00PM    - 4:30PM</td>

Business Continuity Case Study</td>

Venkataram Arabolu, BSI</td>

Usability and Privacy in Security</td>

Ponnurangam Kumaraguru, IIIT </td> </tr>

4:30 PM   - 5:30 PM</td>

Tea break & Snacks on Exhibition Floor</td> </tr>

7:00PM    - 10:00PM</td>

India Technology Leadership Summit 2009 (Exclusive by invitation only) -" Information Security Concerns for Offshoring"</td> </tr>

 </td> </tr>

Where ></td>

Conference Hall 1</td>

 </td>

Conference Hall 2</td>

 </td>

Conference Hall 3: </td> </tr>

Who ></td>

(Security Researchers & Enthusiasts)</td>

(Security Auditors, Developers, QA, Architects)</td>

(Leaders, Managers, C&S professionals)</td> </tr>

Schedule</td>

Topic</td>

Speaker</td>

Topic</td>

Speaker</td>

Topic</td>

Speaker</td> </tr>

9:00AM   - 10:00AM</td>

Round Table with Speakers / Industry Panel - "Security Today & Tomorrow'</td> </tr>

10:00AM - 10:30AM</td>

Tea break & Snacks on Exhibition Floor</td> </tr>

10:30AM - 11:30AM</td>

Ten Things Web Developers Still Aren't Doing</td>

Frank Kim, ThinkSec Consulting</td>

 </td>

SANS Dshield Webhoneypot Project</td>

Jason Lam, Independent Security Researcher</td>

 </td>

Critical Infrastructure Security “Danger Without borders” </td>

John Bumgarner, US Cyber Consequence Unit (USCCU)</td> </tr>

11:30AM - 12:30PM</td>

Cloud Hacking – Distributed Attack & Exploit Platform</td>

Shreeraj Shah, Blueinfy Solutions</td>

Testing JSON Applications For Security Holes</td>

Aviram Jenik, Beyond Security</td>

Critical Infrastructure Security “Danger Without borders” </td>

John Bumgarner, US Cyber Consequence Unit (USCCU)</td> </tr>

12:30PM  - 1:30PM</td>

Lunch</td> </tr>

1:30PM    - 2:30PM</td>

All Your Packets Belong to Us - Attacking Backbone Technologies </td>

Daniel Mende, Security Researcher, ERNW</td>

 </td>

Risk based Penetration Testing</td>

K. K. Mookhey, Founder & Principal Consultant, NII Consulting</td>

 </td>

Wi-Fi security: the good, the bad and the ugly</td>

Cedric Blancher, EADS Innovation Works</td> </tr>

2:30PM    - 3:30PM</td>

Xprobe3 - What's New? Going Application Level</td>

Fyodor Yarochkin, Guard-info</td>

OWASP SAMM</td>

Pravir Chandra, OWASP</td>

Do you wanna Play a Game Game theory and Cyberwar</td>

Bryan K. Fite, HackSecKlahn</td> </tr>

3:30PM-4:00PM</td>

Tea break & Snacks on Exhibition Floor</td> </tr>

4:00 PM   - 5:00PM</td>

Rumbling Infections – Web Malware Ontology</td>

Aditya K. Sood, COSEINC</td>

 </td>

 Hacking Oracle From Web</td>

Sid, Independent Security Researcher</td>

 </td>

Connected Information Security Framework</td>

Anil Kumar Chintala, Microsoft</td> </tr>

5:00PM    - 5:30PM</td>

Closing Remarks by Organizing Committee</td> </tr> </table> </div>

</body>

Two Day Trainings

Two days post-conference are dedicated towards best-of-breed trainings being conducted in association with SANS, ISC2 and other organizations. Trainings tracks have been made available as One-Day tracks and Two-Day tracks scheduled for 19th & 20th November 2009.

Day 1 - 19th Nov, 2009				Day 2 - 20th Nov, 2009
Course ID	Course Duration (# of Days)	Course Title	Instructor	Course ID	Course Duration (# of Days)	Course Title	Instructor
One Day Training Tracks
SB1DHSO	1 Day	ORACLE Hacking & Security	Sumit Sidharth,	SB1DAWH	1 Day	Advanced Web Hacking -Securing AJAX, RIA & SOA	Shreeraj Shah
SB1DAFT	1 Day	Advanced Forensics Techniques	Dr. Chandrasekhar Umapathy,	SB1DIAT	1 Day	In-depth Assessment Techniques: Design, Code, and Runtime	Fydor Yarochkin,
Two Day Training Tracks
SB2DNST	2 Days	Building advanced Network Security Tools	Daniel Mende,	SB2DNST	2 Days	Building advanced Network Security Tools	Daniel Mende,
SB2DCBC	2 Days	(ISC)2 CSSLP CBK Boot camp	Mano Paul,	SB2DCBC	2 Days	(ISC)2 CSSLP CBK Boot camp	Mano Paul,
SB2DSCJ / SANS Course ID : DEV530	2 Days	Essential Secure Coding in Java / JEE		SB2DSCJ / SANS Course ID : DEV530	2 Days	Essential Secure Coding in Java / JEE
SB2DWPT / SANS Course ID : DEV538	2 Days	Web Application Pen Testing Hands-On Immersion		SB2DWPT / SANS Course ID : DEV538	2 Days	Web Application Pen Testing Hands-On Immersion
SB2DSAB / SANS Course ID : AUD429	2 Days	IT Security Audit Essentials Bootcamp		SB2DSAB / SANS Course ID : AUD429	2 Days	IT Security Audit Essentials Bootcamp

Venue

Four Days Event is planned out at:

Hotel Crowne Plaza,
Site - 2, Sector - 29,
Gurgaon-122001 (National Capital Region), India
Hotel Front Desk: 91-124-4534000
Hotel Fax: 91-124-4304800

Sponsors

Co-Sponsor "Leadership Summit 2009"		CTF (Capture The Flag) Sponsor		Education  Partner

|                                      |

Associate Sponsors	Media Partners	Supporters
‎

Hotel & Travel

Hotel Stay & Travel Information

To help our valued delegates with Hotel and Travel services, we have negotiated with some of the best and Budget Category Guest houses in Gurgaon that are located within a radius of 3 - 4 Kms from the venue.

Limited cheaper accommodation is available near the venue hotel in budget hotels/apartments area. The tariff of these hotels ranges from Rs.2000 onwards per room night (inclusive of Room Rent, Breakfast and Luxury Tax). Interested delegates / students can send a formal request for the desired accommodations and dates to our official travel agent.

OFFICIAL TRAVEL AGENT

Dreamz conference Management Pvt.Ltd will look after your hotel accommodation in Gurgaon and New Delhi, pre & post conference tours / travel needs in India for delegates and visitors independently. If you wish to go for sightseeing tour within New Delhi and around it to places like Agra, Jaipur, Rajasthan etc. However, we would encourage you to make early bookings which will be done on “first – come - first service” basis and let us know of your interest, since that would ultimately work in your favour. Early reservation is strongly recommended as November being a high demand period for hotels in Gurgaon.

For further details please contact:

DREAMZ CONFERENCE MANAGEMENT PVT.LTD

406, Ansal’s Majestic Tower, Vikas Puri, New Delhi – 110018

Tel: 91 – 11 – 41586401, 402, Fax: 91 – 11 – 41586400

Email: [email protected] / [email protected]

Website: www.dreamztravel.net

Contact Person: Jitin Batra ( +91 9810558569 )

Capture the Flag

HackHunt 2009

India's foremost Hacking Challenge

Your Shot to the Title of India's best hacker along with Prize money of more than Rs 150,000 up for grabs!

Search for India’s Best Ethical Hacker

HackHunt is India’s leading hacking competition and aims at awarding the best ethical hackers in the country. The competition is brought to you by Appin Security Group, a leading Information Security and Ethical Hacking Company and Securitybyte, a global Information Security Conference Company.

The competition will be conducted in 3 phases. The 1st two rounds will be online and the 3rd and final round will take place at“Securitybyte & OWASP Appsec Asia 2009” on November 17, 2009at Crowne Plaza, Gurgaon.

Level 1 – Knowledge Check All the participants will be answering a quiz and based on the score top 10% will be shortlisted to 2nd round.

Level 2 – Skill Check This stage will require an attacker to get to the final FLAG file which he/she would need to register for the event.

Level 3 – Final Round This stage will require the attackers to exploit a pre-announced SSID which has WPA (or wpa 2).

To participate and for more details visit website :- http://www.hackerscouncil.org/

PacketWars

First time in India brought to you by Securitybyte!
About PacketWars

PacketWars is an intense, real-time information warfare simulation. Unlike other “capture the flag” games, the battlegrounds featured in PacketWars use the same software and hardware you would encounter in the real world.

PacketWars is designed to operate like a sport. Think Formula One Racing meets professional golf with a dash of Ultimate Fighting thrown in for good measure. Serious fun!

Visit http://packetwars.com/ for more details. How To Play?

PacketWars is a Sport like nothing you have ever experienced! Games known as “BATTLES” pit individual players and teams against each other in a race to achieve defined objectives.

The rules of engagement are simple: - Illegal activity of any kind is prohibited - Protect yourself at all times - Battles are designed to be of a low, medium or high difficulty level based on the battle objectives and battle duration - Primary, Secondary and Tertiary objectives are defined and assigned points based on difficulty - Battles have time limits and other defined constraints - Constraints are sometimes known to the combatants and other times are not - Anything that is not expressly prohibited is allowed - Points are awarded for FLARE

Equipment Needed: - Most combants use a notebook and a BackTrack CD however you are only limited by your imagination and bank account - You need a battle field and a PacketMaster…Oh yeah, skillz come in handy also!How To Play

<b.How can I participate?</b>
PacketWars to be held at the Hotel Crowne Plaza, Gurgaon on Nov 17 & Nov 18, 2009. Participation is FREE! Schedule will be announced soon.

WebWar III

About Hackers attack, coders defend, when you get them together you end up with Web War III. WWIII is designed to put your Web Application attack and defense skills to the test.

Teams Each team consists of two players, an attacker and a defender. The attacker would be capable of identifying Web Application Vulnerabilities (OWASP Top 10). The defender would be capable of writing secure Java code.

Game Format

The game has two stages:

Stage 1: Each team is given a VM Ware image containing a web server hosting a vulnerable web application. During this stage each team identifies the vulnerabilities in their application. They try to fix the identified vulnerabilities by making code changes.

Stage 2: The IP addresses of the Web Server's of all the teams is announced. Each team looks for vulnerabilities in the Web Applications of the other teams. Vulnerabilities found on the opponents' application get positive points. Vulnerabilities found by the opponents on your application get negative points.

Team with the highest points at the end of Stage 2 wins.

Tools and Equipments

Each team should bring their own laptop with VM Ware installed. The attacker can use any tools they bring. The applications come with ESAPI to help the defenders fix the code quicker.

Leadership Summit 2009

India's top technology thought leaders coming together to discuss "Security concerns in off-shoring"

Honored Guests
-Honorable Former President of India, Dr. A.P.J Abdul Kalam to inaugrate the Leadership Summit 2009.
-Prof. Howard A. Schmidt(Advisor, NIST; Former Vice Chair - President’s Critical Infrastructure Board; Former Special Advisor – Cyberspace Security for White House)
-Mr. Hord Tipton, Executive Director (ISC)2

About the Event
An elite gathering of 200 technology leaders, decision makers & InfoSec experts from leading service providers, government agencies and various industry verticals.
Two hours of panel discussions between three panels of 12 distinguished industry experts representing outsourcing companies, service providers and the regulatory bodies. Panel discussions will be followed by networking dinner & cocktails.

Prof Howard A. Schmidt (Advisor, NIST; Former Vice Chair - President’s Critical Infrastructure Board; Former Special Advisor – Cyberspace Security for White House) will facilitate the panel discussions. Thought leaders participating in the panel discussions are:

Outsourcing Organizations
Mr. Raghavendra Vaidya, CIO - GE Capital India
Mr. CRN Vairavelu, VP - Ford Technology Services India
Mr. Pankaj Agrawal, CISO - Aircel Limited
TBD

Service Providers
Mr. Terry Thomas, Partner - Ernst & Young
Mr. Debashis Ghosh, Head (LS&H ISU) - Tata Consultancy Services
Mr. Sunil Gujral, EVP & CTO - Quatrro
Mr. Sunil Goyal, COO - Sopra group

Regulatory Bodies
Dr. Kamlesh Bajaj, CEO - DSCI (a NASSCOM initiative)
Dr. Gulshan Rai, Director - CERT-in
Mr. Hord Tipton, Executive Director - ISC2 (ex CIO, US Department of Interior)
Mr. Vakul Sharma, Lawyer - Supreme Court

The event is exclusive to industry leaders and is by private invitation only. If you are interested in attending the event, please email your business card to [email protected] This e-mail address is being protected from spambots.

Venue - Hotel Crowne Plaza, Gurgaon | Timings - 5:30PM - 9:00PM

Please contact Chair - OWASP India for sponsorship opportunities.

Category: OWASP India