Events Related OWASP ATL Presentation – intrepidusgroup.com I recently gave a presentation at OWASP ATL on the OWASP Mobile Top 10 and how to assess mobile applications. This was a light weight discussion of the OWASP Mobile Top 10 and some topical and technical concerns related to securing mobile applications. OWASP Benelux Days 2011 – [...]

Resources Strategies To Mitigate Targeted Cyber Intrusions – dsd.gov.au Australian computer networks are being targeted by adversaries seeking access to sensitive information. A commonly used technique is social engineering, where malicious “spear phishing” emails are tailored to entice the reader to open them. Users may be tempted to open malicious email attachments or follow embedded [...]

Events Related ENISA First 2011 The European Network & Information Security Agency (ENISA) formed in 2004. The agency supports the commission and the EU member states in the area of information security. Facilitate the exchange of information between EU institutions, the public sector and the private sector. Security Challenges for Future Systems – blog.c22.cc #First2011-Remediating [...]

Events Related: OWASP threat modeling project – myappsecurity.blogspot.com We are starting an OWASP threat modeling project to standardize a threat modeling approach which can be used by various companies. Resources: Neil Daswani Reveals His Process for Security Research – resources.infosecinstitute.com In our ongoing series of interviews, this week Neil Daswani answered a few questions and [...]

Events Related Hop Hacking Hedy – cutawaysecurity.com Although this started as one of my first full-fledged hardware projects, the intent was always to evaluate ways to cheaply assess deployments frequency hopping spread spectrum (FHSS) technologies (please review and I’ll assume you did). OWASP Summit 2011 Results – diniscruz.blogspot.com As you can see by the Summit’s highlights, [...]

Events Related ShmooCon 2011 Getting to ShmooCon each year is always challenging (as is trying to get home). Mother Nature seems to enjoy disrupting the travel to and from the conference, which is held in Washington, D.C in January or February of each year. ShmooCon 2011 – intrepidusgroup.com ShmooCon 2011 Conference Wrap Up – blog.tenablesecurity.com [...]

. Here are the information security events in North America this month: 18th Annual Network & Distributed System Security Symposium: February 6 to 9 in San Diego BSides San Francisco: February 14 to 15 in San Francisco RSA Conference 2011: February 14 to 18 in San Francisco BSides Cleveland: February 18 in Cleveland SANS Phoenix: [...]

Events Related Shmoocon 2011 ShmooCon 2011: Team Joch vs. Android: The Final Showdown – blog.c22.cc Shmoocon 2011: Printers gone wild! – blog.c22.cc ShmooCon 2011: Attacking 3G and 4G mobile telecommunications networks – blog.c22.cc ShmooCon 2011: Defeating mTANS for profit – blog.c22.com ShmooCon 2011: URL enlargement: Is it for you? – blog.c22.cc Resources Train Like You [...]

Events Related: OWASP BeNeLux Day 2010 Wrap Up – rootshell.be Yesterday, the three OWASP Benelux chapters organized together their annual OWASP BeNeLux day. Ok folks, secwest11@cansecwest.com is live and the countdown timer goes to December 29th for entries to CanSecWest 2011 Call For Papers – twitter.com, @dragosr BayThreat was awesome, do it again! – mckeay.net Which [...]

. Here are the information security events in North America this month: Hackers to Hackers Conference 2010: December 3 in Cancun SANS WhatWorks in Incident Detection and Log Management Summit 2010: December 8 to 9 in Washington, DC BayThreat: December 10 to 11 in Mountain View DojoCon 2010: December 11 to 12 in Dulles . [...]